Skip to content
OpenAdvisories
Unscored USN-2958-1 3 CVEs

poppler vulnerabilities

Published May 2, 2016 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the poppler pdfseparate tool incorrectly handled
certain filenames. A local attacker could use this issue to cause the tool
to crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only applied to Ubuntu 12.04 LTS. (CVE-2013-4473,
CVE-2013-4474)

It was discovered that poppler incorrectly parsed certain malformed PDF
documents. If a user or automated system were tricked into opening a
crafted PDF file, an attacker could cause a denial of service or possibly
execute arbitrary code with privileges of the user invoking the program.
(CVE-2015-8868)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS poppler 0.24.5-2ubuntu4.4

Vulnerabilities 3

  • Unscored —
    CVE-2013-4473

    Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.2 allows remote…

    poppler Debian
  • Unscored —
    CVE-2013-4474 Public exploit EPSS 10%

    Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote…

    poppler Debian
  • Unscored —
    CVE-2015-8868

    Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows rem…

    poppler poppler Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2013-4473
  • report
    https://ubuntu.com/security/CVE-2013-4474
  • report
    https://ubuntu.com/security/CVE-2015-8868