In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-utilsUpgrade poppler-demosUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-develUpgrade poppler-glibUpgrade poppler-glib-develUpgrade poppler-qtUpgrade poppler-debuginfoUpgrade popplerUpgrade poppler-qt-devel | Aug 25, 2020 | May 23, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | May 23, 2019 |
| Centos_linux | — | Upgrade poppler-glib-debuginfoUpgrade evince-develUpgrade poppler-qt-develUpgrade poppler-debugsourceUpgrade poppler-glib-develUpgrade poppler-qtUpgrade poppler-utils-debuginfoUpgrade evince-debuginfoUpgrade poppler-cpp-develUpgrade evinceUpgrade evince-dviUpgrade poppler-cppUpgrade popplerUpgrade poppler-glibUpgrade poppler-cpp-debuginfoUpgrade evince-nautilusUpgrade poppler-utilsUpgrade poppler-develUpgrade poppler-qt5-debuginfoUpgrade evince-libsUpgrade evince-browser-pluginUpgrade poppler-demosUpgrade poppler-debuginfo | Sep 12, 2019 | May 23, 2019 |
| Debian | — | Upgrade poppler | Jun 7, 2019 | May 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade popplerUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glib | Feb 22, 2021 | May 23, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade popplerUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glib | Jan 20, 2021 | May 23, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler | Dec 16, 2020 | May 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler | Aug 31, 2020 | May 23, 2019 |
| Huawei Euleros 2_0_sp9 | — | Upgrade popplerUpgrade poppler-cpp | Nov 3, 2020 | May 23, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.79.0-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | May 23, 2019 |
| Oracle_linux | — | Upgrade poppler-cppUpgrade poppler-qt5-develUpgrade evince-develUpgrade evinceUpgrade popplerUpgrade poppler-qt5Upgrade poppler-develUpgrade poppler-glib-develUpgrade poppler-qt-develUpgrade evince-nautilusUpgrade evince-dviUpgrade poppler-demosUpgrade poppler-glibUpgrade poppler-cpp-develUpgrade poppler-utilsUpgrade evince-libsUpgrade evince-browser-pluginUpgrade poppler-qt | Jul 21, 2020 | May 23, 2019 |
| Redhat_linux | — | Upgrade popplerUpgrade evince-libsUpgrade poppler-qt-develUpgrade poppler-cpp-debuginfoUpgrade poppler-utils-debuginfoUpgrade evince-debuginfoUpgrade evinceUpgrade poppler-demosUpgrade poppler-debuginfoUpgrade evince-nautilusUpgrade poppler-cppUpgrade evince-develUpgrade poppler-develUpgrade poppler-qt5-debuginfoUpgrade poppler-qt5-develUpgrade poppler-glibUpgrade poppler-cpp-develUpgrade poppler-qtUpgrade evince-browser-pluginUpgrade poppler-qt5Upgrade poppler-glib-develUpgrade poppler-glib-debuginfoUpgrade poppler-debugsourceUpgrade poppler-utilsNo solution existsUpgrade evince-dvi | Sep 12, 2019 | May 23, 2019 |
| Suse | — | Upgrade libpoppler-develUpgrade libpoppler-qt4-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-qt4-4Upgrade libpoppler-glib-develUpgrade poppler-toolsUpgrade libpoppler60Upgrade libpoppler73-32bitUpgrade libpoppler73Upgrade libpoppler-glib8Upgrade libpoppler-cpp0 | Aug 9, 2024 | May 23, 2019 |
| Ubuntu | — | Upgrade poppler-utilsUpgrade libpoppler58Upgrade libpoppler79Upgrade libpoppler73Upgrade libpoppler85 | Jun 27, 2019 | May 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub