CVE-2008-1693 The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF...
MediumCVSS 6.8
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, related to dereferencing a function pointer associated with the type of this font object.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| poppler | <= 0.7.3 | No fix listed |
| poppler | = 0.1 | No fix listed |
| poppler | = 0.1.1 | No fix listed |
| poppler | = 0.1.2 | No fix listed |
| poppler | = 0.2.0 | No fix listed |
| poppler | = 0.3.0 | No fix listed |
| poppler | = 0.3.1 | No fix listed |
| poppler | = 0.3.2 | No fix listed |
| poppler | = 0.3.3 | No fix listed |
| poppler | = 0.4.0 | No fix listed |
| poppler | = 0.4.1 | No fix listed |
| poppler | = 0.4.2 | No fix listed |
| poppler | = 0.4.3 | No fix listed |
| poppler | = 0.4.4 | No fix listed |
| poppler | = 0.5.0 | No fix listed |
| poppler | = 0.5.1 | No fix listed |
| poppler | = 0.5.2 | No fix listed |
| poppler | = 0.5.3 | No fix listed |
| poppler | = 0.5.4 | No fix listed |
| poppler | = 0.5.9 | No fix listed |
| poppler | = 0.5.91 | No fix listed |
| poppler | = 0.6.0 | No fix listed |
| poppler | = 0.6.1 | No fix listed |
| poppler | = 0.6.2 | No fix listed |
| poppler | = 0.6.3 | No fix listed |
Show 10 more
| Product | Affected versions | Fixed in |
|---|---|---|
| poppler | = 0.6.4 | No fix listed |
| poppler | = 0.7.0 | No fix listed |
| poppler | = 0.7.1 | No fix listed |
| poppler | = 0.7.2 | No fix listed |
| debian/poppler(Debian:12) | < 0.6.4-1 | 0.6.4-1 |
| debian/poppler(Debian:13) | < 0.6.4-1 | 0.6.4-1 |
| debian/poppler(Debian:14) | < 0.6.4-1 | 0.6.4-1 |
| debian/xpdf(Debian:12) | < 3.02 | 3.02 |
| debian/xpdf(Debian:13) | < 3.02 | 3.02 |
| debian/xpdf(Debian:14) | < 3.02 | 3.02 |
References
- SUSE-SR:2008:011 vendor-advisory
- 29816 third-party-advisory
- 29834 third-party-advisory
- 29836 third-party-advisory
- 29851 third-party-advisory
- 29853 third-party-advisory
- 29868 third-party-advisory
- 29869 third-party-advisory
- 29884 third-party-advisory
- 29885 third-party-advisory
- 30019 third-party-advisory
- 30033 third-party-advisory
- 30717 third-party-advisory
- 31035 third-party-advisory
- GLSA-200804-18 vendor-advisory
- 1019893 vdb-entry
- DSA-1548 patch vendor-advisory
- DSA-1606 vendor-advisory
- MDVSA-2008:089 vendor-advisory
- MDVSA-2008:173 vendor-advisory
- MDVSA-2008:197 vendor-advisory
- SUSE-SR:2008:013 vendor-advisory
- RHSA-2008:0238 vendor-advisory
- RHSA-2008:0239 vendor-advisory
- RHSA-2008:0240 vendor-advisory
- RHSA-2008:0262 vendor-advisory
- 28830 vdb-entry
- USN-603-1 vendor-advisory
- USN-603-2 vendor-advisory
- ADV-2008-1265 vdb-entry
- ADV-2008-1266 vdb-entry
- xpdf-pdf-code-execution(41884) vdb-entry
- oval:org.mitre.oval:def:11226 signature vdb-entry
- FEDORA-2008-3312 vendor-advisory
- Debian Security Tracker CVE-2008-1693 vendor-advisory
- bugs.debian.org issue-tracking