CVE-2008-1693

NameCVE-2008-1693
DescriptionThe CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, related to dereferencing a function pointer associated with the type of this font object.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDSA-1548-1, DSA-1606-1
Debian Bugs476842

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
poppler (PTS)jessie, jessie (lts)0.26.5-2+deb8u16fixed
stretch (security)0.48.0-2+deb9u4fixed
stretch (lts), stretch0.48.0-2+deb9u6fixed
buster (security), buster, buster (lts)0.71.0-5+deb10u3fixed
bullseye (security), bullseye20.09.0-3.1+deb11u1fixed
bookworm22.12.0-2fixed
sid, trixie24.08.0-3fixed
swftools (PTS)jessie0.9.2+git20130725-2fixed
stretch0.9.2+git20130725-4.1fixed
texlive-base (PTS)jessie, jessie (lts)2014.20141024-2+deb8u1fixed
stretch2016.20170123-5fixed
buster2018.20190227-2fixed
bullseye2020.20210202-3fixed
bookworm2022.20230122-3fixed
sid, trixie2024.20241115-1fixed
texlive-bin (PTS)jessie, jessie (lts)2014.20140926.35254-6+deb8u1fixed
stretch (security)2016.20160513.41080.dfsg-2+deb9u1fixed
stretch (lts), stretch2016.20160513.41080.dfsg-2+deb9u2fixed
buster, buster (lts)2018.20181218.49446-1+deb10u3fixed
buster (security)2018.20181218.49446-1+deb10u2fixed
bullseye2020.20200327.54578-7+deb11u1fixed
bullseye (security)2020.20200327.54578-7+deb11u2fixed
bookworm2022.20220321.62855-5.1+deb12u1fixed
sid, trixie2024.20240313.70630+ds-5fixed
xpdf (PTS)jessie3.03-17fixed
stretch3.04-4fixed
buster3.04-13fixed
bullseye3.04+git20210103-3fixed
bookworm3.04+git20220601-1fixed
sid, trixie3.04+git20240613-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
kdegraphicssource(unstable)(not affected)
popplersourceetch0.4.5-5.1etch3DSA-1606-1
popplersource(unstable)0.6.4-1476842
swftoolssource(unstable)(not affected)
texlive-basesource(unstable)(not affected)
texlive-binsource(unstable)(not affected)
xpdfsourceetch3.01-9.1+etch3DSA-1548-1
xpdfsource(unstable)3.02

Notes

- kdegraphics <not-affected> (Vulnerable code not present)
- texlive-bin <not-affected> (code already has the needed fix)
see GfxFont.cc GfxFont::readEmbFontFile, line 362 checks if the font file is
a stream or not. Anyone knows a fixed version?
- texlive-base <not-affected> (Vulnerable code not present)
- swftools <not-affected> (Vulnerable file/code not present)

Search for package or bug name: Reporting problems