Approved changes feed: RSS · Atom

cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*

part: a version: 0.3.1 update: *

VendorPoppler (98aae7ff-3584-5962-ae0e-9e263082a752)
ProductPoppler (38483a4d-8b57-5752-9bd5-671c83322e0c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/freedesktop/poppler purl2cpe 2026-06-01 10:13:41.241346
pkg:rpm/fedora/poppler purl2cpe 2026-06-01 10:13:41.241349
pkg:rpm/opensuse/poppler purl2cpe 2026-06-01 10:13:41.241351

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3609 vulnerable 2026-06-08 04:51:42.911532 Details available
Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:10.540Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3608 vulnerable 2026-06-08 04:51:42.888960 Details available
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:10.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3607 vulnerable 2026-06-08 04:51:42.886700 Details available
Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:10.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3606 vulnerable 2026-06-08 04:51:42.885023 Details available
Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:11.027Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3605 vulnerable 2026-06-08 04:51:42.883118 Details available
Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, related to (1) glib/poppler-page.cc; (2) ArthurOutputDev.cc, (3) CairoOutputDev.cc, (4) GfxState.cc, (5) JBIG2Stream.cc, (6) PSOutputDev.cc, and (7) SplashOutputDev.cc in poppler/; and (8) SplashBitmap.cc, (9) Splash.cc, and (10) SplashFTFont.cc in splash/. NOTE: this may overlap CVE-2009-0791.
Published: 2009-11-02T15:00:00.000Z
Updated: 2024-08-07T06:31:10.587Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3604 vulnerable 2026-06-08 04:51:42.874451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3603 vulnerable 2026-06-08 04:51:42.845024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1188 vulnerable 2026-06-08 04:51:13.570661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1187 vulnerable 2026-06-08 04:51:13.568326 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1183 vulnerable 2026-06-08 04:51:13.424667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1182 vulnerable 2026-06-08 04:51:13.419911 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1181 vulnerable 2026-06-08 04:51:13.414290 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1180 vulnerable 2026-06-08 04:51:13.408955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1179 vulnerable 2026-06-08 04:51:13.403206 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0800 vulnerable 2026-06-08 04:51:11.390727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0799 vulnerable 2026-06-08 04:51:11.386585 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0756 vulnerable 2026-06-08 04:51:11.109769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0755 vulnerable 2026-06-08 04:51:11.108580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0166 vulnerable 2026-06-08 04:51:07.954353 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1693 vulnerable 2026-06-08 04:50:21.541647 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.