Approved changes feed: RSS · Atom

cpe:2.3:a:freedesktop:poppler:0.3.0:*:*:*:*:*:*:*

part: a version: 0.3.0 update: *

VendorFreedesktop (2c544e5d-e68e-5b35-a616-dc08f0ba697e)
ProductPoppler (b2e9eefd-0d12-5535-9c38-bc4de43f056e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libpoppler-dev purl2cpe 2026-06-01 10:14:03.992156
pkg:deb/ubuntu/libpoppler-dev purl2cpe 2026-06-01 10:14:03.992157
pkg:freedesktop/poppler/poppler purl2cpe 2026-06-01 10:14:03.992159
pkg:github/freedesktop/poppler purl2cpe 2026-06-01 10:14:03.992160
pkg:rpm/fedora/poppler purl2cpe 2026-06-01 10:14:03.992161
pkg:rpm/opensuse/poppler purl2cpe 2026-06-01 10:14:03.992163

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4474 vulnerable 2026-06-03 14:33:17.108738 Details available
Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service (crash) via format string specifiers in a destination filename.
Published: 2013-11-23T11:00:00.000Z
Updated: 2024-08-06T16:45:14.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4473 vulnerable 2026-06-03 14:33:17.050272 Details available
Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a source filename.
Published: 2013-11-23T11:00:00.000Z
Updated: 2024-08-06T16:45:14.622Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.