An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Jun 7, 2019 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-qtUpgrade poppler-glibUpgrade popplerUpgrade poppler-utils | Aug 31, 2020 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp9 | — | Upgrade poppler-cppUpgrade poppler | Nov 3, 2020 | Apr 5, 2019 |
| Suse | — | Upgrade libpoppler73-32bitUpgrade poppler-toolsUpgrade libpoppler73Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib-develUpgrade libpoppler-cpp0Upgrade libpoppler-glib8Upgrade libpoppler-devel | Dec 2, 2021 | Apr 5, 2019 |
| Ubuntu | — | Upgrade poppler-utilsUpgrade libpoppler85Upgrade libpoppler58Upgrade libpoppler73Upgrade libpoppler79 | Jun 27, 2019 | Apr 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub