PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find() located at Dict.cc, which can (for example) be triggered by passing a crafted pdf file to the pdfunite binary.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | centos-upgrade-popplercentos-upgrade-poppler-cpp-debuginfocentos-upgrade-poppler-debuginfocentos-upgrade-poppler-debugsourcecentos-upgrade-poppler-glibcentos-upgrade-poppler-glib-debuginfocentos-upgrade-poppler-qt5-debuginfocentos-upgrade-poppler-utilscentos-upgrade-poppler-utils-debuginfo | Sep 12, 2019 | Mar 21, 2019 |
| Debian | debian-upgrade-poppler | Sep 27, 2022 | Mar 21, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-popplerhuawei-euleros-2_0_sp2-upgrade-poppler-glibhuawei-euleros-2_0_sp2-upgrade-poppler-qthuawei-euleros-2_0_sp2-upgrade-poppler-utils | Sep 16, 2021 | Mar 21, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-popplerhuawei-euleros-2_0_sp3-upgrade-poppler-glibhuawei-euleros-2_0_sp3-upgrade-poppler-qthuawei-euleros-2_0_sp3-upgrade-poppler-utils | Apr 30, 2021 | Mar 21, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-popplerhuawei-euleros-2_0_sp5-upgrade-poppler-glibhuawei-euleros-2_0_sp5-upgrade-poppler-qthuawei-euleros-2_0_sp5-upgrade-poppler-utils | Feb 24, 2020 | Mar 21, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-popplerhuawei-euleros-2_0_sp8-upgrade-poppler-glibhuawei-euleros-2_0_sp8-upgrade-poppler-qthuawei-euleros-2_0_sp8-upgrade-poppler-utils | Aug 28, 2019 | Mar 21, 2019 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-desktop-pdf-viewer-poppler-0-75-0-11-4-10-0-1-2-0 | Jun 26, 2019 | Mar 21, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-poppleroracle-linux-upgrade-poppler-cpporacle-linux-upgrade-poppler-cpp-develoracle-linux-upgrade-poppler-develoracle-linux-upgrade-poppler-gliboracle-linux-upgrade-poppler-glib-develoracle-linux-upgrade-poppler-qt5oracle-linux-upgrade-poppler-qt5-develoracle-linux-upgrade-poppler-utils | Jul 21, 2020 | Mar 15, 2019 |
| Redhat_linux | redhat-upgrade-popplerredhat-upgrade-poppler-cppredhat-upgrade-poppler-cpp-debuginforedhat-upgrade-poppler-cpp-develredhat-upgrade-poppler-debuginforedhat-upgrade-poppler-debugsourceredhat-upgrade-poppler-develredhat-upgrade-poppler-glibredhat-upgrade-poppler-glib-debuginforedhat-upgrade-poppler-glib-develredhat-upgrade-poppler-qt5redhat-upgrade-poppler-qt5-debuginforedhat-upgrade-poppler-qt5-develredhat-upgrade-poppler-utilsredhat-upgrade-poppler-utils-debuginfo | Sep 12, 2019 | Mar 21, 2019 | |
| Suse | — | suse-upgrade-libpoppler-cpp0suse-upgrade-libpoppler-develsuse-upgrade-libpoppler-glib-develsuse-upgrade-libpoppler-glib8suse-upgrade-libpoppler73suse-upgrade-libpoppler73-32bitsuse-upgrade-poppler-toolssuse-upgrade-typelib-1_0-poppler-0_18 | Dec 2, 2021 | Mar 21, 2019 |
| Ubuntu | ubuntu-upgrade-libpoppler58ubuntu-upgrade-libpoppler73ubuntu-upgrade-libpoppler79ubuntu-upgrade-libpoppler85ubuntu-upgrade-poppler-utils | Jun 27, 2019 | Mar 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub