CVE-2008-2950
NoneCVSS
—
EPSS
15.0%
Published
Jul 7, 2008
CISA due date
—
The record
The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | poppler | 0 | 0.8.4-1.1 |
| Debian:11 | poppler | 0 | 0.8.4-1.1 |
| Debian:12 | poppler | 0 | 0.8.4-1.1 |
| Debian:13 | poppler | 0 | 0.8.4-1.1 |
| Debian:5.0 | poppler | 0 | 0.8.2-2+lenny1 |
| openSUSE:Tumbleweed | poppler | 0 | 21.08.0-1.3 |
Related vulnerabilities
- CVE-2017-14518 In Poppler 0.59.0, a floating point exception exists in the… Also affects poppler
- CVE-2017-14517 In Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry() function… Also affects poppler
- CVE-2017-2820 An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing… Also affects poppler
- CVE-2013-4474 Format string vulnerability in the extractPages function in utils/pdfseparate.cc in… Also affects poppler
- CVE-2013-4473 Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in… Also affects poppler
- CVE-2009-3608 Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before… Also affects poppler
- CVE-2009-0755 The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote… Also affects poppler
- CVE-2009-0756 The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote… Also affects poppler