Skip to content
OpenAdvisories
Unscored DSA-1941-1 10 CVEs

poppler - several vulnerabilities

Published Nov 25, 2009 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 poppler 0.8.7-3

Vulnerabilities 10

  • Unscored —
    CVE-2009-0755 Public exploit EPSS 11%

    The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of servi…

  • Unscored —

    Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of se…

  • Unscored —

    Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might …

  • Unscored —

    The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kd…

  • Unscored —

    Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (applicati…

  • Unscored —

    Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraph…

  • Unscored —

    Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remot…

  • Unscored —
    CVE-2009-3608 EPSS 10%

    Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.…

  • Unscored —

    Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1…

  • Unscored —

    Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc in Poppler (aka libpoppler) 0.10.6, 0.…