CVE-2008-2950: poppler Code Injection

EPSS trend

Probability

15.00%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

+0.75 pp

From 14.25% on 18-09-2026

18-09-202618-10-2026

EPSS score

15.00%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databaselocallinuxVerified
Poppler 0.8.4 - libpoppler Uninitialized pointer Code Execution
Maturity: weaponized

References

21 links

wiki.rpath.com/Advisories:rPSA-2008-0223X Refsource CONFIRM
www.securityfocus.com/archive/1/494142/100/0/threadedMailing ListX Refsource BUGTRAQ
www.exploit-db.com/exploits/6032ExploitX Refsource EXPLOIT DB
secunia.com/advisories/30963Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.htmlVendor AdvisoryX Refsource SUSE
www.vupen.com/english/advisories/2008/2024/referencesVDB EntryX Refsource VUPEN
secunia.com/advisories/31002Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/30107VDB EntryX Refsource BID
security.gentoo.org/glsa/glsa-200807-04.xmlVendor AdvisoryX Refsource GENTOO
www.ocert.org/advisories/ocert-2008-007.htmlX Refsource MISC

Show all 21 references

secunia.com/advisories/31267Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-631-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/31405Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2008-August/msg00161.htmlVendor AdvisoryX Refsource FEDORA
exchange.xforce.ibmcloud.com/vulnerabilities/43619VDB EntryX Refsource XF
www.mandriva.com/security/advisories?name=MDVSA-2008:146Vendor AdvisoryX Refsource MANDRIVA
securityreason.com/securityalert/3977Third Party AdvisoryX Refsource SREASON
www.securitytracker.com/id?1020435VDB EntryX Refsource SECTRACK
www.securityfocus.com/archive/1/493980/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/31167Third Party AdvisoryX Refsource SECUNIA
security-tracker.debian.org/tracker/CVE-2008-2950Advisory

Related vulnerabilities

CVE-2025-52885debianpoppler+110.17%1y ago10-10-2025 22:11Poppler ia a library for rendering PDF files, and examining or modifying their structure. A use-after-free (write) vulnerability has been detected in versions Poppler prior to 25.10.0 within the StructTreeRoot class. The issue arises from the use of raw pointers to elements of a `std::vector`, which can lead to dangling pointers when the vector is resized. The vulnerability stems from the way that refToParentMap stores references to `std::vector` elements using raw pointers. These pointers may become invalid when the vector is resized. This vulnerability is a common security problem involving the use of raw pointers to `std::vectors`. Internally, `std::vector `stores its elements in a dynamically allocated array. When the array reaches its capacity and a new element is added, the vector reallocates a larger block of memory and moves all the existing elements to the new location. At this point if any pointers to elements are stored before a resize occurs, they become dangling pointers once the reallocation happens. Version 25.10.0 contains a patch for the issue.CVE-2025-52886debianpoppler+340.45%1y ago02-07-2025 15:46Poppler is a PDF rendering library. Versions prior to 25.06.0 use `std::atomic_int` for reference counting. Because `std::atomic_int` is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue.CVE-2008-1693debianpoppler+134.94%18y ago18-04-2008 15:00The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, related to dereferencing a function pointer associated with the type of this font object.CVE-2012-2142debianpoppler+72.94%6y ago09-01-2020 20:42The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.CVE-2010-0207debianpoppler+30.85%6y ago30-10-2019 20:46In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (application crash) in xpdf-based PDF viewers.CVE-2010-4653debianpoppler+41.82%6y ago13-11-2019 19:12An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.

All vulnerabilities inpoppler

CVE-2008-2950: poppler Code Injection

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References