Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2013-1788 Details

Description

poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger an "invalid memory access" in (1) splash/Splash.cc, (2) poppler/Function.cc, and (3) poppler/Stream.cc.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=0388837f01bc467045164f9ddaff787000a8caaa	CVE	ExploitPatch
http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=8b6dc55e530b2f5ede6b9dfb64aafdd1d5836492	CVE	ExploitPatch
http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=957aa252912cde85d76c41e9710b33425a82b696	CVE	ExploitPatch
http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=bbc2d8918fe234b7ef2c480eb148943922cc0959	CVE	ExploitPatch
http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=e14b6e9c13d35c9bd1e0c50906ace8e707816888	CVE	ExploitPatch
http://j00ru.vexillium.org/?p=1507	CVE
http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100081.html	CVE
http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100090.html	CVE
https://bugzilla.redhat.com/show_bug.cgi?id=917108	CVE
http://secunia.com/advisories/52846	CVE	Vendor Advisory
http://ubuntu.com/usn/usn-1785-1	CVE
http://www.debian.org/security/2013/dsa-2719	CVE
http://www.mandriva.com/security/advisories?name=MDVSA-2013:143	CVE
http://www.openwall.com/lists/oss-security/2013/02/28/4	CVE
http://www.openwall.com/lists/oss-security/2013/02/28/8	CVE
http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=0388837f01bc467045164f9ddaff787000a8caaa	[email protected]	ExploitPatch
http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=8b6dc55e530b2f5ede6b9dfb64aafdd1d5836492	[email protected]	ExploitPatch
http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=957aa252912cde85d76c41e9710b33425a82b696	[email protected]	ExploitPatch
http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=bbc2d8918fe234b7ef2c480eb148943922cc0959	[email protected]	ExploitPatch
http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=e14b6e9c13d35c9bd1e0c50906ace8e707816888	[email protected]	ExploitPatch
http://j00ru.vexillium.org/?p=1507	[email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100081.html	[email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100090.html	[email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=917108	[email protected]
http://secunia.com/advisories/52846	[email protected]	Vendor Advisory
http://ubuntu.com/usn/usn-1785-1	[email protected]
http://www.debian.org/security/2013/dsa-2719	[email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2013:143	[email protected]
http://www.openwall.com/lists/oss-security/2013/02/28/4	[email protected]
http://www.openwall.com/lists/oss-security/2013/02/28/8	[email protected]

see all 30 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer	[email protected]

Affected Products

Product	Versions
freedesktop poppler	<= 0.22.0
CPE cpe:2.3:a:freedesktop:poppler:::::::: Remediation No remediation found in references.

Change History

5 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 29, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Apr 10, 2013	Initial Analysis	[email protected]