freedesktop Poppler 0.24.1
Approved changes feed: RSS · Atom
cpe:2.3:a:freedesktop:poppler:0.24.1:*:*:*:*:*:*:*
part: a version: 0.24.1 update: *
| Vendor | Freedesktop (2c544e5d-e68e-5b35-a616-dc08f0ba697e) |
|---|---|
| Product | Poppler (b2e9eefd-0d12-5535-9c38-bc4de43f056e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libpoppler-dev |
purl2cpe | 2026-06-01 10:14:03.992008 |
pkg:deb/ubuntu/libpoppler-dev |
purl2cpe | 2026-06-01 10:14:03.992009 |
pkg:freedesktop/poppler/poppler |
purl2cpe | 2026-06-01 10:14:03.992010 |
pkg:github/freedesktop/poppler |
purl2cpe | 2026-06-01 10:14:03.992012 |
pkg:rpm/fedora/poppler |
purl2cpe | 2026-06-01 10:14:03.992013 |
pkg:rpm/opensuse/poppler |
purl2cpe | 2026-06-01 10:14:03.992014 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-7511 |
vulnerable | 2026-06-03 14:37:32.309289 |
Details available
poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents.
Published: 2017-05-30T18:00:00.000Z
Updated: 2024-08-05T16:04:11.847Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7296 |
vulnerable | 2026-06-03 14:33:35.002814 |
Details available
The JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the correct specifier within a format string, which allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted PDF file.
Published: 2014-01-26T01:00:00.000Z
Updated: 2024-08-06T18:01:20.423Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4472 |
vulnerable | 2026-06-03 14:33:17.045420 |
Details available
The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
Published: 2014-04-22T14:00:00.000Z
Updated: 2024-08-06T16:45:14.839Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.