Approved changes feed: RSS · Atom

cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*

part: a version: 0.5.1 update: *

VendorPoppler (98aae7ff-3584-5962-ae0e-9e263082a752)
ProductPoppler (38483a4d-8b57-5752-9bd5-671c83322e0c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/freedesktop/poppler purl2cpe 2026-06-01 10:13:41.259756
pkg:rpm/fedora/poppler purl2cpe 2026-06-01 10:13:41.259759
pkg:rpm/opensuse/poppler purl2cpe 2026-06-01 10:13:41.259761

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3609 vulnerable 2026-06-08 04:51:42.911680 Details available
Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:10.540Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3608 vulnerable 2026-06-08 04:51:42.889106 Details available
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:10.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3607 vulnerable 2026-06-08 04:51:42.886850 Details available
Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:10.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3606 vulnerable 2026-06-08 04:51:42.885246 Details available
Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:11.027Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3605 vulnerable 2026-06-08 04:51:42.883278 Details available
Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, related to (1) glib/poppler-page.cc; (2) ArthurOutputDev.cc, (3) CairoOutputDev.cc, (4) GfxState.cc, (5) JBIG2Stream.cc, (6) PSOutputDev.cc, and (7) SplashOutputDev.cc in poppler/; and (8) SplashBitmap.cc, (9) Splash.cc, and (10) SplashFTFont.cc in splash/. NOTE: this may overlap CVE-2009-0791.
Published: 2009-11-02T15:00:00.000Z
Updated: 2024-08-07T06:31:10.587Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3604 vulnerable 2026-06-08 04:51:42.874609 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3603 vulnerable 2026-06-08 04:51:42.849445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1188 vulnerable 2026-06-08 04:51:13.570853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1187 vulnerable 2026-06-08 04:51:13.568524 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1183 vulnerable 2026-06-08 04:51:13.424811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1182 vulnerable 2026-06-08 04:51:13.420075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1181 vulnerable 2026-06-08 04:51:13.414476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1180 vulnerable 2026-06-08 04:51:13.409150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1179 vulnerable 2026-06-08 04:51:13.403404 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0800 vulnerable 2026-06-08 04:51:11.391017 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0799 vulnerable 2026-06-08 04:51:11.386745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0756 vulnerable 2026-06-08 04:51:11.109911 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0755 vulnerable 2026-06-08 04:51:11.108738 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0166 vulnerable 2026-06-08 04:51:07.958858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1693 vulnerable 2026-06-08 04:50:21.546271 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.