Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-cppUpgrade poppler-develUpgrade poppler-debuginfoUpgrade poppler-qt-develUpgrade poppler-demosUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler-cpp-develUpgrade poppler-glib-develUpgrade popplerUpgrade poppler-utils | Aug 25, 2020 | Sep 5, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | Sep 5, 2019 |
| Centos_linux | — | Upgrade evince-dviUpgrade poppler-debuginfoUpgrade poppler-qt-develUpgrade poppler-glibUpgrade popplerUpgrade poppler-cppUpgrade evince-libsUpgrade evinceUpgrade evince-develUpgrade evince-browser-pluginUpgrade poppler-develUpgrade poppler-cpp-develUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade poppler-qtUpgrade poppler-demosUpgrade evince-nautilusUpgrade evince-debuginfo | Apr 1, 2020 | Sep 5, 2019 |
| Debian | — | Upgrade poppler | Oct 2, 2019 | Sep 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade popplerUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler-utils | Feb 22, 2021 | Sep 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade popplerUpgrade poppler-glib | Apr 30, 2021 | Sep 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-qtUpgrade poppler-glib | Dec 16, 2020 | Sep 5, 2019 |
| Oracle_linux | — | Upgrade popplerUpgrade evince-dviUpgrade evinceUpgrade poppler-glibUpgrade evince-develUpgrade poppler-qt-develUpgrade poppler-utilsUpgrade poppler-cppUpgrade poppler-qtUpgrade poppler-demosUpgrade poppler-glib-develUpgrade evince-libsUpgrade evince-browser-pluginUpgrade evince-nautilusUpgrade poppler-develUpgrade poppler-cpp-devel | Oct 5, 2022 | Sep 5, 2019 |
| Redhat_linux | — | Upgrade poppler-glibUpgrade poppler-cppUpgrade evince-libsUpgrade evinceUpgrade popplerUpgrade poppler-glib-develUpgrade evince-dviUpgrade poppler-develNo solution existsUpgrade evince-nautilusUpgrade evince-debuginfoUpgrade evince-develUpgrade poppler-demosUpgrade poppler-qtUpgrade poppler-qt-develUpgrade poppler-utilsUpgrade evince-browser-pluginUpgrade poppler-debuginfoUpgrade poppler-cpp-devel | Apr 1, 2020 | Sep 5, 2019 |
| Suse | — | Upgrade libpoppler-qt4-4Upgrade libpoppler-qt4-develUpgrade libpoppler73Upgrade poppler-toolsUpgrade libpoppler-glib8Upgrade libpoppler-develUpgrade libpoppler60Upgrade libpoppler-glib-develUpgrade libpoppler73-32bitUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-cpp0Upgrade libpoppler44 | Aug 9, 2024 | Sep 5, 2019 |
| Ubuntu | — | Upgrade libpoppler58Upgrade poppler-utilsUpgrade libpoppler73 | Nov 27, 2020 | Sep 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub