Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-utilsUpgrade poppler-qt-develUpgrade poppler-develUpgrade poppler-debuginfoUpgrade poppler-cpp-develUpgrade poppler-cppUpgrade poppler-demosUpgrade poppler-qtUpgrade poppler-glibUpgrade popplerUpgrade poppler-glib-devel | Apr 27, 2020 | Mar 8, 2019 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Mar 8, 2019 |
| Centos_linux | — | Upgrade poppler-utilsUpgrade evince-dviUpgrade poppler-qt5-debuginfoUpgrade poppler-qtUpgrade evince-develUpgrade okular-develUpgrade evince-libsUpgrade popplerUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-glib-develUpgrade evince-browser-pluginUpgrade evince-nautilusUpgrade poppler-debuginfoUpgrade poppler-qt-develUpgrade poppler-utils-debuginfoUpgrade okular-libsUpgrade okularUpgrade poppler-demosUpgrade evinceUpgrade okular-partUpgrade okular-debuginfoUpgrade poppler-cpp-debuginfoUpgrade poppler-debugsourceUpgrade poppler-develUpgrade evince-debuginfoUpgrade poppler-glibUpgrade poppler-glib-debuginfo | Aug 28, 2019 | Mar 8, 2019 |
| Debian | — | Upgrade poppler | Apr 10, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-qtUpgrade poppler-glibUpgrade popplerUpgrade poppler-utils | Feb 22, 2021 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler | Nov 19, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade popplerUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glib | Sep 12, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-utilsUpgrade poppler-qt | Aug 28, 2019 | Mar 8, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.75.0-11.4.10.0.1.2.0 on Solaris 11.4 | Jun 26, 2019 | Mar 8, 2019 |
| Oracle_linux | — | Upgrade evinceUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade poppler-cpp-develUpgrade poppler-glibUpgrade evince-develUpgrade poppler-qtUpgrade popplerUpgrade evince-nautilusUpgrade okularUpgrade okular-partUpgrade evince-dviUpgrade evince-browser-pluginUpgrade poppler-qt5Upgrade poppler-qt-develUpgrade poppler-demosUpgrade poppler-develUpgrade okular-libsUpgrade okular-develUpgrade evince-libsUpgrade poppler-cppUpgrade poppler-qt5-devel | Jul 21, 2020 | Mar 7, 2019 |
| Redhat_linux | — | Upgrade okular-develUpgrade poppler-qtUpgrade okular-debuginfoUpgrade poppler-cpp-develUpgrade evince-develNo solution existsUpgrade poppler-glib-develUpgrade poppler-demosUpgrade poppler-utilsUpgrade poppler-qt5-debuginfoUpgrade poppler-qt-develUpgrade evince-nautilusUpgrade poppler-utils-debuginfoUpgrade poppler-develUpgrade poppler-qt5Upgrade evince-debuginfoUpgrade okular-partUpgrade evince-browser-pluginUpgrade poppler-qt5-develUpgrade poppler-debugsourceUpgrade poppler-cpp-debuginfoUpgrade evince-dviUpgrade poppler-glib-debuginfoUpgrade evinceUpgrade poppler-glibUpgrade okular-libsUpgrade okularUpgrade popplerUpgrade evince-libsUpgrade poppler-cppUpgrade poppler-debuginfo | Aug 7, 2019 | Mar 8, 2019 |
| Suse | — | Upgrade libpoppler-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib-develUpgrade libpoppler-glib8Upgrade libpoppler73Upgrade poppler-toolsUpgrade libpoppler-cpp0Upgrade libpoppler73-32bit | Dec 2, 2021 | Mar 8, 2019 |
| Ubuntu | — | Upgrade libpoppler79Upgrade libpoppler58Upgrade libpoppler73Upgrade libpoppler85Upgrade poppler-utils | Jun 27, 2019 | Mar 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub