A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' program, would crash the application causing a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade poppler-develUpgrade poppler-qt5-develUpgrade poppler-qt5Upgrade poppler-cpp-develUpgrade poppler-glib-develUpgrade poppler-cppUpgrade evince-devel | May 4, 2022 | Dec 3, 2020 |
| Alpine Linux | — | Upgrade poppler | Mar 26, 2024 | Dec 3, 2020 |
| Centos_linux | — | Upgrade evince-libs-debuginfoUpgrade evince-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade popplerUpgrade poppler-glibUpgrade evince-nautilus-debuginfoUpgrade evinceUpgrade poppler-glib-debuginfoUpgrade poppler-utils-debuginfoUpgrade evince-libsUpgrade evince-debugsourceUpgrade evince-nautilusUpgrade poppler-debuginfoUpgrade poppler-cpp-debuginfoUpgrade evince-browser-pluginUpgrade poppler-utilsUpgrade poppler-debugsourceUpgrade poppler-qt5-debuginfo | Jun 1, 2021 | Dec 3, 2020 |
| Debian | — | Upgrade poppler | Sep 27, 2022 | Dec 3, 2020 |
| Huawei Euleros 2_0_sp10 | — | Upgrade popplerUpgrade poppler-cppUpgrade poppler-help | Feb 28, 2022 | Dec 3, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-qtUpgrade poppler-glibUpgrade popplerUpgrade poppler-utils | Oct 28, 2022 | Dec 3, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler | Jun 17, 2022 | Dec 3, 2020 |
| Oracle_linux | — | Upgrade popplerUpgrade evince-develUpgrade evinceUpgrade poppler-qt5-develUpgrade poppler-cppUpgrade poppler-qt5Upgrade poppler-glib-develUpgrade poppler-glibUpgrade poppler-develUpgrade poppler-utilsUpgrade evince-browser-pluginUpgrade poppler-cpp-develUpgrade evince-libsUpgrade evince-nautilus | May 26, 2021 | Mar 22, 2019 |
| Redhat_linux | — | Upgrade poppler-qt5-debuginfoUpgrade poppler-cpp-debuginfoUpgrade evince-nautilusUpgrade evince-debugsourceUpgrade poppler-debuginfoUpgrade poppler-develUpgrade evince-browser-pluginUpgrade poppler-qt5-develUpgrade evince-libsUpgrade poppler-qt5Upgrade poppler-cpp-develUpgrade evince-debuginfoUpgrade poppler-glib-debuginfoUpgrade evince-libs-debuginfoUpgrade poppler-glib-develUpgrade evinceUpgrade popplerNo solution existsUpgrade evince-develUpgrade poppler-utils-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade evince-nautilus-debuginfoUpgrade poppler-debugsourceUpgrade poppler-cppUpgrade poppler-glibUpgrade poppler-utils | May 21, 2021 | Dec 3, 2020 |
| Rocky_linux | — | Upgrade poppler-qt5-develUpgrade evince-debuginfoUpgrade poppler-utils-debuginfoUpgrade poppler-develUpgrade poppler-glibUpgrade evince-libsUpgrade poppler-debugsourceUpgrade poppler-qt5Upgrade evinceUpgrade poppler-debuginfoUpgrade popplerUpgrade evince-libs-debuginfoUpgrade poppler-utilsUpgrade evince-browser-plugin-debuginfoUpgrade evince-browser-pluginUpgrade evince-develUpgrade poppler-glib-debuginfoUpgrade poppler-cppUpgrade poppler-glib-develUpgrade poppler-cpp-debuginfoUpgrade evince-debugsourceUpgrade poppler-qt5-debuginfoUpgrade evince-nautilus-debuginfoUpgrade evince-nautilusUpgrade poppler-cpp-devel | Mar 12, 2024 | Dec 3, 2020 |
| Suse | — | Upgrade poppler-toolsUpgrade libpoppler-glib-develUpgrade libpoppler-develUpgrade libpoppler-cpp0Upgrade libpoppler73Upgrade libpoppler73-32bitUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib8 | Dec 2, 2021 | Nov 25, 2020 |
| Ubuntu | — | Upgrade libpoppler58Upgrade poppler-utilsUpgrade libpoppler73 | Nov 27, 2020 | Nov 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub