Execution Flaw in Poppler and Associated Applications
CVE-2008-1693

Currently unrated

Key Information:

Vendor

Poppler

Status
Poppler
Vendor
CVE Published:
18 April 2008

What is CVE-2008-1693?

The CairoFont::create function in Poppler has a vulnerability that arises from improper handling of embedded fonts in PDF files. This flaw can potentially allow remote attackers to execute arbitrary code via a crafted font object, specifically due to the improper dereferencing of a function pointer associated with the font object type. Affected applications that utilize Poppler, such as Xpdf, Evince, ePDFview, and KWord, could be exploited if users open maliciously crafted PDF documents.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://secunia.com/advisories/29869
third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2008...
vendor-advisoryx_refsource_SUSE
http://www.mandriva.com/security/advisories?name=MDVSA-20...
vendor-advisoryx_refsource_MANDRIVA

EPSS Score

6% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.