Approved changes feed: RSS · Atom

cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*

part: a version: 0.3.0 update: *

VendorPoppler (98aae7ff-3584-5962-ae0e-9e263082a752)
ProductPoppler (38483a4d-8b57-5752-9bd5-671c83322e0c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/freedesktop/poppler purl2cpe 2026-06-01 10:13:41.239232
pkg:rpm/fedora/poppler purl2cpe 2026-06-01 10:13:41.239236
pkg:rpm/opensuse/poppler purl2cpe 2026-06-01 10:13:41.239238

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3609 vulnerable 2026-06-08 04:51:42.911517 Details available
Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:10.540Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3608 vulnerable 2026-06-08 04:51:42.888943 Details available
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:10.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3607 vulnerable 2026-06-08 04:51:42.886682 Details available
Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:10.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3606 vulnerable 2026-06-08 04:51:42.885007 Details available
Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:11.027Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3605 vulnerable 2026-06-08 04:51:42.883102 Details available
Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, related to (1) glib/poppler-page.cc; (2) ArthurOutputDev.cc, (3) CairoOutputDev.cc, (4) GfxState.cc, (5) JBIG2Stream.cc, (6) PSOutputDev.cc, and (7) SplashOutputDev.cc in poppler/; and (8) SplashBitmap.cc, (9) Splash.cc, and (10) SplashFTFont.cc in splash/. NOTE: this may overlap CVE-2009-0791.
Published: 2009-11-02T15:00:00.000Z
Updated: 2024-08-07T06:31:10.587Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3604 vulnerable 2026-06-08 04:51:42.874432 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3603 vulnerable 2026-06-08 04:51:42.844483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1188 vulnerable 2026-06-08 04:51:13.570640 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1187 vulnerable 2026-06-08 04:51:13.568302 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1183 vulnerable 2026-06-08 04:51:13.424651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1182 vulnerable 2026-06-08 04:51:13.419893 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1181 vulnerable 2026-06-08 04:51:13.414271 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1180 vulnerable 2026-06-08 04:51:13.408934 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1179 vulnerable 2026-06-08 04:51:13.403185 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0800 vulnerable 2026-06-08 04:51:11.390710 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0799 vulnerable 2026-06-08 04:51:11.386567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0756 vulnerable 2026-06-08 04:51:11.109752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0755 vulnerable 2026-06-08 04:51:11.108561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0166 vulnerable 2026-06-08 04:51:07.953867 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1693 vulnerable 2026-06-08 04:50:21.541119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.