CVE-2008-1693
published 2008-04-18CVE-2008-1693: The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does…
PriorityP336medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
4.94%
91.2th percentile
The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, related to dereferencing a function pointer associated with the type of this font object.
Affected
41 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | poppler | < poppler 0.6.4-1 (bookworm) | poppler 0.6.4-1 (bookworm) |
| debian | texlive-base | < poppler 0.6.4-1 (bookworm) | poppler 0.6.4-1 (bookworm) |
| debian | texlive-bin | < poppler 0.6.4-1 (bookworm) | poppler 0.6.4-1 (bookworm) |
| debian | xpdf | < poppler 0.6.4-1 (bookworm) | poppler 0.6.4-1 (bookworm) |
| freedesktop | poppler | >= 0 < 0.6.4-1 | 0.6.4-1 |
| freedesktop | poppler | >= 0 < 0.6.4-1 | 0.6.4-1 |
| freedesktop | poppler | >= 0 < 0.6.4-1 | 0.6.4-1 |
| freedesktop | poppler | >= 0 < 0.6.4-1 | 0.6.4-1 |
| poppler | poppler | <= 0.7.3 | — |
| poppler | poppler | — | — |
| poppler | poppler | — | — |
| poppler | poppler | — | — |
| poppler | poppler | — | — |
| poppler | poppler | — | — |
| poppler | poppler | — | — |
| poppler | poppler | — | — |
| poppler | poppler | — | — |
| poppler | poppler | — | — |
| poppler | poppler | — | — |
| poppler | poppler | — | — |
| poppler | poppler | — | — |
| poppler | poppler | — | — |
| poppler | poppler | — | — |
| poppler | poppler | — | — |
| poppler | poppler | — | — |
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv6.8MEDIUM
vendor_debian6.8MEDIUM
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
poppler vulnerability
vendor_ubuntu·2008-04-17
CVE-2008-1693 poppler vulnerability
Title: poppler vulnerability
Summary: poppler vulnerability
It was discovered that the poppler PDF library did not correctly handle
certain malformed embedded fonts. If a user or an automated system were
tricked into opening a malicious PDF, a remote attacker could execute
arbitrary code with user privileges.
Instructions: After a standard system upgrade you need to restart your session to effect
the necessary changes.
Red Hat
xpdf: embedded font vulnerability
vendor_redhat·2008-04-17·CVSS 6.8
CVE-2008-1693 [MEDIUM] xpdf: embedded font vulnerability
xpdf: embedded font vulnerability
The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, related to dereferencing a function pointer associated with the type of this font object.
Ubuntu
KOffice vulnerability
vendor_ubuntu·2008-04-17
CVE-2008-1693 KOffice vulnerability
Title: KOffice vulnerability
Summary: KOffice vulnerability
USN-603-1 fixed vulnerabilities in poppler. This update provides the
corresponding updates for KWord, part of KOffice.
Original advisory details:
It was discovered that the poppler PDF library did not correctly handle
certain malformed embedded fonts. If a user or an automated system were
tricked into opening a malicious PDF, a remote attacker could execute
arbitrary code with user privileges.
Instructions: After a standard system upgrade you need to restart KWord to effect
the necessary changes.
Debian
CVE-2008-1693: poppler - The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before...
vendor_debian·2008·CVSS 6.8
CVE-2008-1693 [MEDIUM] CVE-2008-1693: poppler - The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before...
The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, related to dereferencing a function pointer associated with the type of this font object.
Scope: local
bookworm: resolved (fixed in 0.6.4-1)
bullseye: resolved (fixed in 0.6.4-1)
forky: resolved (fixed in 0.6.4-1)
sid: resolved (fixed in 0.6.4-1)
trixie: resolved (fixed in 0.6.4-1)
GHSA
GHSA-3f98-v8mx-8cr7: The CairoFont::create function in CairoFontEngine
ghsa_unreviewed·2022-05-01
CVE-2008-1693 [MEDIUM] CWE-20 GHSA-3f98-v8mx-8cr7: The CairoFont::create function in CairoFontEngine
The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, related to dereferencing a function pointer associated with the type of this font object.
OSV
CVE-2008-1693: The CairoFont::create function in CairoFontEngine
osv·2008-04-18·CVSS 6.8
CVE-2008-1693 [MEDIUM] CVE-2008-1693: The CairoFont::create function in CairoFontEngine
The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, related to dereferencing a function pointer associated with the type of this font object.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.htmlhttp://secunia.com/advisories/29816http://secunia.com/advisories/29834http://secunia.com/advisories/29836http://secunia.com/advisories/29851http://secunia.com/advisories/29853http://secunia.com/advisories/29868http://secunia.com/advisories/29869http://secunia.com/advisories/29884http://secunia.com/advisories/29885http://secunia.com/advisories/30019http://secunia.com/advisories/30033http://secunia.com/advisories/30717http://secunia.com/advisories/31035http://security.gentoo.org/glsa/glsa-200804-18.xmlhttp://securitytracker.com/id?1019893http://www.debian.org/security/2008/dsa-1548http://www.debian.org/security/2008/dsa-1606http://www.mandriva.com/security/advisories?name=MDVSA-2008:089http://www.mandriva.com/security/advisories?name=MDVSA-2008:173http://www.mandriva.com/security/advisories?name=MDVSA-2008:197http://www.novell.com/linux/security/advisories/2008_13_sr.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0238.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0239.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0240.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0262.htmlhttp://www.securityfocus.com/bid/28830http://www.ubuntu.com/usn/usn-603-1http://www.ubuntu.com/usn/usn-603-2http://www.vupen.com/english/advisories/2008/1265/referenceshttp://www.vupen.com/english/advisories/2008/1266/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/41884https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11226https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00522.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.htmlhttp://secunia.com/advisories/29816http://secunia.com/advisories/29834http://secunia.com/advisories/29836http://secunia.com/advisories/29851http://secunia.com/advisories/29853http://secunia.com/advisories/29868http://secunia.com/advisories/29869http://secunia.com/advisories/29884http://secunia.com/advisories/29885http://secunia.com/advisories/30019http://secunia.com/advisories/30033http://secunia.com/advisories/30717http://secunia.com/advisories/31035http://security.gentoo.org/glsa/glsa-200804-18.xmlhttp://securitytracker.com/id?1019893http://www.debian.org/security/2008/dsa-1548http://www.debian.org/security/2008/dsa-1606http://www.mandriva.com/security/advisories?name=MDVSA-2008:089http://www.mandriva.com/security/advisories?name=MDVSA-2008:173http://www.mandriva.com/security/advisories?name=MDVSA-2008:197http://www.novell.com/linux/security/advisories/2008_13_sr.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0238.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0239.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0240.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0262.htmlhttp://www.securityfocus.com/bid/28830http://www.ubuntu.com/usn/usn-603-1http://www.ubuntu.com/usn/usn-603-2http://www.vupen.com/english/advisories/2008/1265/referenceshttp://www.vupen.com/english/advisories/2008/1266/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/41884https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11226https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00522.html
2008-04-18
Published