In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document, as demonstrated by pdftocairo.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-poppleramazon-linux-ami-2-upgrade-poppler-cppamazon-linux-ami-2-upgrade-poppler-cpp-develamazon-linux-ami-2-upgrade-poppler-debuginfoamazon-linux-ami-2-upgrade-poppler-demosamazon-linux-ami-2-upgrade-poppler-develamazon-linux-ami-2-upgrade-poppler-glibamazon-linux-ami-2-upgrade-poppler-glib-develamazon-linux-ami-2-upgrade-poppler-qtamazon-linux-ami-2-upgrade-poppler-qt-develamazon-linux-ami-2-upgrade-poppler-utils | Apr 27, 2020 | Feb 3, 2019 | |
| Amazon_linux | — | amazon-linux-upgrade-poppler | Aug 28, 2019 | Feb 2, 2019 |
| Centos_linux | — | centos-upgrade-evincecentos-upgrade-evince-browser-plugincentos-upgrade-evince-debuginfocentos-upgrade-evince-develcentos-upgrade-evince-dvicentos-upgrade-evince-libscentos-upgrade-evince-nautiluscentos-upgrade-okularcentos-upgrade-okular-debuginfocentos-upgrade-okular-develcentos-upgrade-okular-libscentos-upgrade-okular-partcentos-upgrade-popplercentos-upgrade-poppler-cppcentos-upgrade-poppler-cpp-debuginfocentos-upgrade-poppler-cpp-develcentos-upgrade-poppler-debuginfocentos-upgrade-poppler-debugsourcecentos-upgrade-poppler-demoscentos-upgrade-poppler-develcentos-upgrade-poppler-glibcentos-upgrade-poppler-glib-debuginfocentos-upgrade-poppler-glib-develcentos-upgrade-poppler-qtcentos-upgrade-poppler-qt-develcentos-upgrade-poppler-qt5-debuginfocentos-upgrade-poppler-utilscentos-upgrade-poppler-utils-debuginfo | Aug 28, 2019 | Feb 3, 2019 |
| Debian | debian-upgrade-poppler | Mar 12, 2019 | Feb 2, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-popplerhuawei-euleros-2_0_sp2-upgrade-poppler-glibhuawei-euleros-2_0_sp2-upgrade-poppler-qthuawei-euleros-2_0_sp2-upgrade-poppler-utils | Feb 22, 2019 | Feb 2, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-popplerhuawei-euleros-2_0_sp3-upgrade-poppler-glibhuawei-euleros-2_0_sp3-upgrade-poppler-qthuawei-euleros-2_0_sp3-upgrade-poppler-utils | Mar 27, 2019 | Feb 2, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-popplerhuawei-euleros-2_0_sp5-upgrade-poppler-glibhuawei-euleros-2_0_sp5-upgrade-poppler-qthuawei-euleros-2_0_sp5-upgrade-poppler-utils | Mar 11, 2019 | Feb 2, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-popplerhuawei-euleros-2_0_sp8-upgrade-poppler-glibhuawei-euleros-2_0_sp8-upgrade-poppler-qthuawei-euleros-2_0_sp8-upgrade-poppler-utils | Aug 31, 2020 | Feb 3, 2019 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-popplerhuawei-euleros-2_0_sp9-upgrade-poppler-cpphuawei-euleros-2_0_sp9-upgrade-poppler-help | Feb 8, 2021 | Feb 3, 2019 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-desktop-pdf-viewer-poppler-0-75-0-11-4-10-0-1-2-0 | Jun 26, 2019 | Feb 3, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-evinceoracle-linux-upgrade-evince-browser-pluginoracle-linux-upgrade-evince-develoracle-linux-upgrade-evince-dvioracle-linux-upgrade-evince-libsoracle-linux-upgrade-evince-nautilusoracle-linux-upgrade-okularoracle-linux-upgrade-okular-develoracle-linux-upgrade-okular-libsoracle-linux-upgrade-okular-partoracle-linux-upgrade-poppleroracle-linux-upgrade-poppler-cpporacle-linux-upgrade-poppler-cpp-develoracle-linux-upgrade-poppler-demosoracle-linux-upgrade-poppler-develoracle-linux-upgrade-poppler-gliboracle-linux-upgrade-poppler-glib-develoracle-linux-upgrade-poppler-qtoracle-linux-upgrade-poppler-qt5oracle-linux-upgrade-poppler-qt5-develoracle-linux-upgrade-poppler-qt-develoracle-linux-upgrade-poppler-utils | Jul 21, 2020 | Feb 1, 2019 |
| Redhat_linux | redhat-upgrade-evinceredhat-upgrade-evince-browser-pluginredhat-upgrade-evince-debuginforedhat-upgrade-evince-develredhat-upgrade-evince-dviredhat-upgrade-evince-libsredhat-upgrade-evince-nautilusredhat-upgrade-okularredhat-upgrade-okular-debuginforedhat-upgrade-okular-develredhat-upgrade-okular-libsredhat-upgrade-okular-partredhat-upgrade-popplerredhat-upgrade-poppler-cppredhat-upgrade-poppler-cpp-debuginforedhat-upgrade-poppler-cpp-develredhat-upgrade-poppler-debuginforedhat-upgrade-poppler-debugsourceredhat-upgrade-poppler-demosredhat-upgrade-poppler-develredhat-upgrade-poppler-glibredhat-upgrade-poppler-glib-debuginforedhat-upgrade-poppler-glib-develredhat-upgrade-poppler-qtredhat-upgrade-poppler-qt-develredhat-upgrade-poppler-qt5redhat-upgrade-poppler-qt5-debuginforedhat-upgrade-poppler-qt5-develredhat-upgrade-poppler-utilsredhat-upgrade-poppler-utils-debuginfo | Aug 7, 2019 | Feb 3, 2019 | |
| Suse | — | suse-upgrade-libpoppler-cpp0suse-upgrade-libpoppler-develsuse-upgrade-libpoppler-glib-develsuse-upgrade-libpoppler-glib8suse-upgrade-libpoppler73suse-upgrade-libpoppler73-32bitsuse-upgrade-poppler-toolssuse-upgrade-typelib-1_0-poppler-0_18 | Dec 2, 2021 | Feb 2, 2019 |
| Ubuntu | ubuntu-upgrade-libpoppler44ubuntu-upgrade-libpoppler58ubuntu-upgrade-libpoppler73ubuntu-upgrade-libpoppler79ubuntu-upgrade-poppler-utils | Feb 16, 2019 | Feb 2, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub