Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-qtUpgrade poppler-cpp-develUpgrade poppler-cppUpgrade poppler-qt-develUpgrade poppler-debuginfoUpgrade poppler-utilsUpgrade poppler-develUpgrade poppler-demosUpgrade popplerUpgrade poppler-glib-develUpgrade poppler-glib | Apr 27, 2020 | Mar 8, 2019 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Mar 8, 2019 |
| Centos_linux | — | Upgrade poppler-debugsourceUpgrade poppler-glibUpgrade okular-debuginfoUpgrade evinceUpgrade okular-partUpgrade poppler-cpp-debuginfoUpgrade poppler-utils-debuginfoUpgrade poppler-debuginfoUpgrade poppler-glib-debuginfoUpgrade okularUpgrade poppler-qt-develUpgrade okular-libsUpgrade evince-debuginfoUpgrade poppler-demosUpgrade poppler-develUpgrade poppler-qt5-debuginfoUpgrade poppler-cppUpgrade evince-dviUpgrade poppler-utilsUpgrade okular-develUpgrade poppler-glib-develUpgrade evince-nautilusUpgrade popplerUpgrade evince-develUpgrade poppler-qtUpgrade evince-browser-pluginUpgrade poppler-cpp-develUpgrade evince-libs | Aug 28, 2019 | Mar 8, 2019 |
| Debian | — | Upgrade poppler | Apr 10, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-qtUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler | Feb 22, 2021 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-glibUpgrade poppler-qt | Nov 19, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-qtUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler | Sep 12, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade popplerUpgrade poppler-glib | Aug 28, 2019 | Mar 8, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.75.0-11.4.10.0.1.2.0 on Solaris 11.4 | Jun 26, 2019 | Mar 8, 2019 |
| Oracle_linux | — | Upgrade poppler-utilsUpgrade evince-dviUpgrade poppler-qtUpgrade poppler-cpp-develUpgrade popplerUpgrade evince-develUpgrade okularUpgrade okular-partUpgrade evinceUpgrade poppler-glibUpgrade poppler-glib-develUpgrade evince-nautilusUpgrade evince-libsUpgrade evince-browser-pluginUpgrade poppler-cppUpgrade okular-develUpgrade poppler-demosUpgrade poppler-develUpgrade okular-libsUpgrade poppler-qt5-develUpgrade poppler-qt-develUpgrade poppler-qt5 | Jul 21, 2020 | Mar 7, 2019 |
| Redhat_linux | — | Upgrade poppler-qtUpgrade poppler-cpp-develUpgrade poppler-debugsourceUpgrade okular-develUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade poppler-cpp-debuginfoUpgrade evince-browser-pluginUpgrade evince-develUpgrade okular-debuginfoUpgrade poppler-demosUpgrade poppler-qt-develUpgrade poppler-utils-debuginfoUpgrade poppler-develUpgrade okular-partUpgrade poppler-qt5-develNo solution existsUpgrade evince-debuginfoUpgrade poppler-qt5-debuginfoUpgrade poppler-qt5Upgrade evince-nautilusUpgrade evinceUpgrade okularUpgrade evince-dviUpgrade poppler-glib-debuginfoUpgrade popplerUpgrade poppler-glibUpgrade poppler-cppUpgrade evince-libsUpgrade poppler-debuginfoUpgrade okular-libs | Aug 7, 2019 | Mar 8, 2019 |
| Suse | — | Upgrade libpoppler73Upgrade libpoppler-glib8Upgrade libpoppler-glib-develUpgrade libpoppler-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-cpp0Upgrade libpoppler73-32bitUpgrade poppler-tools | Dec 2, 2021 | Mar 8, 2019 |
| Ubuntu | — | Upgrade libpoppler73Upgrade libpoppler85Upgrade poppler-utilsUpgrade libpoppler58Upgrade libpoppler79 | Jun 27, 2019 | Mar 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub