GCVE - cpe:2.3:a:poppler:poppler:0.10.6:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:poppler:poppler:0.10.6:*:*:*:*:*:*:*

part: a version: 0.10.6 update: *

Vendor	Poppler (`98aae7ff-3584-5962-ae0e-9e263082a752`)
Product	Poppler (`38483a4d-8b57-5752-9bd5-671c83322e0c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/freedesktop/poppler`	purl2cpe	2026-06-01 10:13:41.182863
`pkg:rpm/fedora/poppler`	purl2cpe	2026-06-01 10:13:41.182866
`pkg:rpm/opensuse/poppler`	purl2cpe	2026-06-01 10:13:41.182868

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-3704`	vulnerable	2026-06-08 04:55:16.477812	Details available The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption. Published: 2010-11-05T17:00:00.000Z Updated: 2024-08-07T03:18:53.042Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050285.html http://www.openwall.com/lists/oss-security/2010/10/04/6 http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049392.html http://www.redhat.com/support/errata/RHSA-2010-0859.html http://secunia.com/advisories/42357	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3703`	vulnerable	2026-06-08 04:55:16.457256	Details available The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service (crash) via a PDF file that triggers an uninitialized pointer dereference. Published: 2010-11-05T17:00:00.000Z Updated: 2024-08-07T03:18:52.924Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2010/10/04/6 http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049392.html http://www.redhat.com/support/errata/RHSA-2010-0859.html http://secunia.com/advisories/42357 https://bugzilla.redhat.com/show_bug.cgi?id=639356	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3938`	vulnerable	2026-06-08 04:51:45.398164	Details available Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc in Poppler (aka libpoppler) 0.10.6, 0.12.0, and possibly other versions, as used by the Abiword pdftoabw utility, allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted PDF file. Published: 2009-11-13T16:00:00.000Z Updated: 2024-08-07T06:45:50.643Z Open on db.gcve.eu Reference links http://www.debian.org/security/2009/dsa-1941 http://bugs.freedesktop.org/attachment.cgi?id=30599&action=edit http://www.mandriva.com/security/advisories?name=MDVSA-2011:175 http://www.securityfocus.com/bid/36976 http://bugs.freedesktop.org/show_bug.cgi?id=23074	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3609`	vulnerable	2026-06-08 04:51:42.912187	Details available Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read. Published: 2009-10-21T17:00:00.000Z Updated: 2024-08-07T06:31:10.540Z Open on db.gcve.eu Reference links http://secunia.com/advisories/39938 https://rhn.redhat.com/errata/RHSA-2009-1504.html ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch http://www.mandriva.com/security/advisories?name=MDVSA-2009:287 http://secunia.com/advisories/37028	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3608`	vulnerable	2026-06-08 04:51:42.889617	Details available Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. Published: 2009-10-21T17:00:00.000Z Updated: 2024-08-07T06:31:10.520Z Open on db.gcve.eu Reference links http://secunia.com/advisories/39938 https://rhn.redhat.com/errata/RHSA-2009-1504.html ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch http://www.debian.org/security/2009/dsa-1941 http://www.mandriva.com/security/advisories?name=MDVSA-2009:287	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3607`	vulnerable	2026-06-08 04:51:42.887471	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3606`	vulnerable	2026-06-08 04:51:42.885758	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3604`	vulnerable	2026-06-08 04:51:42.880009	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3603`	vulnerable	2026-06-08 04:51:42.866027	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Poppler

Notes

PURL mappings

Vulnerability references

Contribute