Approved changes feed: RSS · Atom

cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*

part: a version: 0.7.1 update: *

VendorPoppler (98aae7ff-3584-5962-ae0e-9e263082a752)
ProductPoppler (38483a4d-8b57-5752-9bd5-671c83322e0c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/freedesktop/poppler purl2cpe 2026-06-01 10:13:41.286836
pkg:rpm/fedora/poppler purl2cpe 2026-06-01 10:13:41.286839
pkg:rpm/opensuse/poppler purl2cpe 2026-06-01 10:13:41.286841

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3609 vulnerable 2026-06-08 04:51:42.911858 Details available
Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:10.540Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3608 vulnerable 2026-06-08 04:51:42.889297 Details available
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:10.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3607 vulnerable 2026-06-08 04:51:42.887056 Details available
Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:10.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3606 vulnerable 2026-06-08 04:51:42.885422 Details available
Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:11.027Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3605 vulnerable 2026-06-08 04:51:42.883493 Details available
Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, related to (1) glib/poppler-page.cc; (2) ArthurOutputDev.cc, (3) CairoOutputDev.cc, (4) GfxState.cc, (5) JBIG2Stream.cc, (6) PSOutputDev.cc, and (7) SplashOutputDev.cc in poppler/; and (8) SplashBitmap.cc, (9) Splash.cc, and (10) SplashFTFont.cc in splash/. NOTE: this may overlap CVE-2009-0791.
Published: 2009-11-02T15:00:00.000Z
Updated: 2024-08-07T06:31:10.587Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3604 vulnerable 2026-06-08 04:51:42.877900 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3603 vulnerable 2026-06-08 04:51:42.854756 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1188 vulnerable 2026-06-08 04:51:13.571122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1187 vulnerable 2026-06-08 04:51:13.568805 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1183 vulnerable 2026-06-08 04:51:13.425094 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1182 vulnerable 2026-06-08 04:51:13.420397 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1181 vulnerable 2026-06-08 04:51:13.414829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1180 vulnerable 2026-06-08 04:51:13.409433 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1179 vulnerable 2026-06-08 04:51:13.403788 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0800 vulnerable 2026-06-08 04:51:11.391240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0799 vulnerable 2026-06-08 04:51:11.386968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0756 vulnerable 2026-06-08 04:51:11.110241 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0755 vulnerable 2026-06-08 04:51:11.108963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0166 vulnerable 2026-06-08 04:51:07.965313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1693 vulnerable 2026-06-08 04:50:21.552480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.