Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-qt-develUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-debuginfoUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-develUpgrade poppler-demosUpgrade poppler-glibUpgrade popplerUpgrade poppler-glib-devel | Apr 27, 2020 | Mar 8, 2019 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Mar 8, 2019 |
| Centos_linux | — | Upgrade poppler-glibUpgrade poppler-demosUpgrade okularUpgrade poppler-debugsourceUpgrade okular-debuginfoUpgrade poppler-debuginfoUpgrade poppler-develUpgrade okular-partUpgrade okular-libsUpgrade poppler-utils-debuginfoUpgrade poppler-glib-debuginfoUpgrade evinceUpgrade poppler-qt-develUpgrade poppler-cpp-debuginfoUpgrade evince-debuginfoUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-cpp-develUpgrade evince-browser-pluginUpgrade poppler-glib-develUpgrade evince-nautilusUpgrade popplerUpgrade evince-develUpgrade poppler-qt5-debuginfoUpgrade evince-dviUpgrade evince-libsUpgrade poppler-cppUpgrade okular-devel | Aug 28, 2019 | Mar 8, 2019 |
| Debian | — | Upgrade poppler | Apr 10, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-qtUpgrade popplerUpgrade poppler-utilsUpgrade poppler-glib | Feb 22, 2021 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade popplerUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-qt | Nov 19, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler | Sep 12, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-qtUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler | Aug 28, 2019 | Mar 8, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.75.0-11.4.10.0.1.2.0 on Solaris 11.4 | Jun 26, 2019 | Mar 8, 2019 |
| Oracle_linux | — | Upgrade poppler-qt5Upgrade poppler-qt-develUpgrade evince-libsUpgrade okular-develUpgrade poppler-cppUpgrade evince-browser-pluginUpgrade poppler-develUpgrade okular-libsUpgrade poppler-qt5-develUpgrade poppler-demosUpgrade evince-dviUpgrade poppler-utilsUpgrade okularUpgrade evince-develUpgrade poppler-qtUpgrade popplerUpgrade evince-nautilusUpgrade poppler-cpp-develUpgrade poppler-glib-develUpgrade poppler-glibUpgrade evinceUpgrade okular-part | Jul 21, 2020 | Mar 7, 2019 |
| Redhat_linux | — | Upgrade poppler-qt5-develUpgrade okular-partUpgrade poppler-debugsourceUpgrade poppler-qt5Upgrade poppler-qtUpgrade poppler-demosUpgrade poppler-glib-develUpgrade poppler-utilsUpgrade evince-debuginfoUpgrade evince-nautilusUpgrade evince-browser-pluginUpgrade poppler-qt-develUpgrade okular-develUpgrade poppler-develUpgrade poppler-cpp-develUpgrade poppler-qt5-debuginfoUpgrade poppler-utils-debuginfoUpgrade evince-develUpgrade okular-debuginfoUpgrade poppler-cpp-debuginfoNo solution existsUpgrade evince-dviUpgrade poppler-glib-debuginfoUpgrade poppler-debuginfoUpgrade okular-libsUpgrade okularUpgrade poppler-glibUpgrade evince-libsUpgrade evinceUpgrade popplerUpgrade poppler-cpp | Aug 7, 2019 | Mar 8, 2019 |
| Suse | — | Upgrade libpoppler73-32bitUpgrade libpoppler-cpp0Upgrade poppler-toolsUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib-develUpgrade libpoppler-develUpgrade libpoppler73Upgrade libpoppler-glib8 | Dec 2, 2021 | Mar 8, 2019 |
| Ubuntu | — | Upgrade libpoppler58Upgrade libpoppler79Upgrade libpoppler73Upgrade poppler-utilsUpgrade libpoppler85 | Jun 27, 2019 | Mar 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub