GCVE - cpe:2.3:a:poppler:poppler:0.10.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:poppler:poppler:0.10.7:*:*:*:*:*:*:*

part: a version: 0.10.7 update: *

Vendor	Poppler (`98aae7ff-3584-5962-ae0e-9e263082a752`)
Product	Poppler (`38483a4d-8b57-5752-9bd5-671c83322e0c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/freedesktop/poppler`	purl2cpe	2026-06-01 10:13:41.184853
`pkg:rpm/fedora/poppler`	purl2cpe	2026-06-01 10:13:41.184856
`pkg:rpm/opensuse/poppler`	purl2cpe	2026-06-01 10:13:41.184859

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-3704`	vulnerable	2026-06-08 04:55:16.477828	Details available The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption. Published: 2010-11-05T17:00:00.000Z Updated: 2024-08-07T03:18:53.042Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050285.html http://www.openwall.com/lists/oss-security/2010/10/04/6 http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049392.html http://www.redhat.com/support/errata/RHSA-2010-0859.html http://secunia.com/advisories/42357	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3703`	vulnerable	2026-06-08 04:55:16.458012	Details available The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service (crash) via a PDF file that triggers an uninitialized pointer dereference. Published: 2010-11-05T17:00:00.000Z Updated: 2024-08-07T03:18:52.924Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2010/10/04/6 http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049392.html http://www.redhat.com/support/errata/RHSA-2010-0859.html http://secunia.com/advisories/42357 https://bugzilla.redhat.com/show_bug.cgi?id=639356	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3609`	vulnerable	2026-06-08 04:51:42.912203	Details available Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read. Published: 2009-10-21T17:00:00.000Z Updated: 2024-08-07T06:31:10.540Z Open on db.gcve.eu Reference links http://secunia.com/advisories/39938 https://rhn.redhat.com/errata/RHSA-2009-1504.html ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch http://www.mandriva.com/security/advisories?name=MDVSA-2009:287 http://secunia.com/advisories/37028	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3608`	vulnerable	2026-06-08 04:51:42.889687	Details available Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. Published: 2009-10-21T17:00:00.000Z Updated: 2024-08-07T06:31:10.520Z Open on db.gcve.eu Reference links http://secunia.com/advisories/39938 https://rhn.redhat.com/errata/RHSA-2009-1504.html ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch http://www.debian.org/security/2009/dsa-1941 http://www.mandriva.com/security/advisories?name=MDVSA-2009:287	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3607`	vulnerable	2026-06-08 04:51:42.887488	Details available Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information. Published: 2009-10-21T17:00:00.000Z Updated: 2024-08-07T06:31:10.561Z Open on db.gcve.eu Reference links http://www.debian.org/security/2009/dsa-1941 http://www.openwall.com/lists/oss-security/2009/12/01/6 https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html http://www.securityfocus.com/bid/36718 http://www.openwall.com/lists/oss-security/2009/12/01/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3606`	vulnerable	2026-06-08 04:51:42.885774	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3604`	vulnerable	2026-06-08 04:51:42.880025	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3603`	vulnerable	2026-06-08 04:51:42.866704	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Poppler

Notes

PURL mappings

Vulnerability references

Contribute