Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade popplerUpgrade poppler-glib-develUpgrade poppler-glibUpgrade poppler-debuginfoUpgrade poppler-develUpgrade poppler-demosUpgrade poppler-qtUpgrade poppler-qt-develUpgrade poppler-cppUpgrade poppler-utilsUpgrade poppler-cpp-devel | Apr 27, 2020 | Mar 8, 2019 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Mar 8, 2019 |
| Centos_linux | — | Upgrade evince-nautilusUpgrade popplerUpgrade evince-dviUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade okular-develUpgrade evince-develUpgrade evince-libsUpgrade poppler-cppUpgrade evince-browser-pluginUpgrade poppler-qt5-debuginfoUpgrade poppler-qtUpgrade poppler-glib-develUpgrade poppler-debugsourceUpgrade okular-debuginfoUpgrade evinceUpgrade okularUpgrade okular-partUpgrade poppler-glib-debuginfoUpgrade poppler-glibUpgrade poppler-utils-debuginfoUpgrade poppler-cpp-debuginfoUpgrade poppler-debuginfoUpgrade poppler-develUpgrade evince-debuginfoUpgrade poppler-demosUpgrade okular-libsUpgrade poppler-qt-devel | Aug 28, 2019 | Mar 8, 2019 |
| Debian | — | Upgrade poppler | Apr 10, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-glibUpgrade poppler-utilsUpgrade popplerUpgrade poppler-qt | Feb 22, 2021 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler | Nov 19, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler | Sep 12, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade popplerUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glib | Aug 28, 2019 | Mar 8, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.75.0-11.4.10.0.1.2.0 on Solaris 11.4 | Jun 26, 2019 | Mar 8, 2019 |
| Oracle_linux | — | Upgrade poppler-demosUpgrade poppler-qt5Upgrade evince-dviUpgrade poppler-utilsUpgrade okularUpgrade evince-develUpgrade popplerUpgrade poppler-cpp-develUpgrade poppler-glibUpgrade okular-partUpgrade poppler-glib-develUpgrade evinceUpgrade evince-nautilusUpgrade poppler-qtUpgrade poppler-qt-develUpgrade poppler-qt5-develUpgrade poppler-develUpgrade evince-browser-pluginUpgrade okular-develUpgrade evince-libsUpgrade poppler-cppUpgrade okular-libs | Jul 21, 2020 | Mar 7, 2019 |
| Redhat_linux | — | Upgrade poppler-develUpgrade okular-develUpgrade poppler-qt5Upgrade evince-nautilusUpgrade poppler-cpp-debuginfoUpgrade evince-browser-pluginUpgrade evince-debuginfoUpgrade okular-debuginfoUpgrade poppler-glib-develUpgrade poppler-cpp-develUpgrade poppler-debugsourceUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-qt5-debuginfoUpgrade poppler-qt5-develUpgrade okular-partUpgrade poppler-qt-develUpgrade poppler-demosNo solution existsUpgrade poppler-utils-debuginfoUpgrade evince-develUpgrade poppler-cppUpgrade evince-dviUpgrade okular-libsUpgrade evinceUpgrade poppler-debuginfoUpgrade popplerUpgrade poppler-glibUpgrade okularUpgrade poppler-glib-debuginfoUpgrade evince-libs | Aug 7, 2019 | Mar 8, 2019 |
| Suse | — | Upgrade libpoppler-cpp0Upgrade libpoppler-glib8Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler73Upgrade libpoppler-develUpgrade libpoppler73-32bitUpgrade poppler-tools | Dec 2, 2021 | Mar 8, 2019 |
| Ubuntu | — | Upgrade libpoppler85Upgrade poppler-utilsUpgrade libpoppler73Upgrade libpoppler79Upgrade libpoppler58 | Jun 27, 2019 | Mar 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub