Approved changes feed: RSS · Atom

cpe:2.3:a:freedesktop:poppler:0.11.1:*:*:*:*:*:*:*

part: a version: 0.11.1 update: *

VendorFreedesktop (2c544e5d-e68e-5b35-a616-dc08f0ba697e)
ProductPoppler (b2e9eefd-0d12-5535-9c38-bc4de43f056e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libpoppler-dev purl2cpe 2026-06-01 10:14:03.991434
pkg:deb/ubuntu/libpoppler-dev purl2cpe 2026-06-01 10:14:03.991436
pkg:freedesktop/poppler/poppler purl2cpe 2026-06-01 10:14:03.991437
pkg:github/freedesktop/poppler purl2cpe 2026-06-01 10:14:03.991438
pkg:rpm/fedora/poppler purl2cpe 2026-06-01 10:14:03.991440
pkg:rpm/opensuse/poppler purl2cpe 2026-06-01 10:14:03.991441

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-7296 vulnerable 2026-06-03 14:33:34.969493 Details available
The JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the correct specifier within a format string, which allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted PDF file.
Published: 2014-01-26T01:00:00.000Z
Updated: 2024-08-06T18:01:20.423Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4474 vulnerable 2026-06-03 14:33:17.109529 Details available
Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service (crash) via format string specifiers in a destination filename.
Published: 2013-11-23T11:00:00.000Z
Updated: 2024-08-06T16:45:14.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4473 vulnerable 2026-06-03 14:33:17.073809 Details available
Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a source filename.
Published: 2013-11-23T11:00:00.000Z
Updated: 2024-08-06T16:45:14.622Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.