Approved changes feed: RSS · Atom

cpe:2.3:a:freedesktop:poppler:0.6.2:*:*:*:*:*:*:*

part: a version: 0.6.2 update: *

VendorFreedesktop (2c544e5d-e68e-5b35-a616-dc08f0ba697e)
ProductPoppler (b2e9eefd-0d12-5535-9c38-bc4de43f056e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libpoppler-dev purl2cpe 2026-06-01 10:14:03.992581
pkg:deb/ubuntu/libpoppler-dev purl2cpe 2026-06-01 10:14:03.992582
pkg:freedesktop/poppler/poppler purl2cpe 2026-06-01 10:14:03.992584
pkg:github/freedesktop/poppler purl2cpe 2026-06-01 10:14:03.992585
pkg:rpm/fedora/poppler purl2cpe 2026-06-01 10:14:03.992587
pkg:rpm/opensuse/poppler purl2cpe 2026-06-01 10:14:03.992588

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4474 vulnerable 2026-06-03 14:33:17.109055 Details available
Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service (crash) via format string specifiers in a destination filename.
Published: 2013-11-23T11:00:00.000Z
Updated: 2024-08-06T16:45:14.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4473 vulnerable 2026-06-03 14:33:17.059886 Details available
Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a source filename.
Published: 2013-11-23T11:00:00.000Z
Updated: 2024-08-06T16:45:14.622Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.