Unrated severityNVD Advisory· Published Jul 7, 2008· Updated Jun 16, 2026
CVE-2008-2950
CVE-2008-2950
Description
The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*range: <=0.8.4
- (no CPE)range: <=0.8.4
- Range: <=0.8.4
Patches
Vulnerability mechanics
References
20- lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.htmlnvd
- secunia.com/advisories/30963nvd
- secunia.com/advisories/31002nvd
- secunia.com/advisories/31167nvd
- secunia.com/advisories/31267nvd
- secunia.com/advisories/31405nvd
- security.gentoo.org/glsa/glsa-200807-04.xmlnvd
- securityreason.com/securityalert/3977nvd
- wiki.rpath.com/Advisories:rPSA-2008-0223nvd
- www.mandriva.com/security/advisoriesnvd
- www.ocert.org/advisories/ocert-2008-007.htmlnvd
- www.securityfocus.com/archive/1/493980/100/0/threadednvd
- www.securityfocus.com/archive/1/494142/100/0/threadednvd
- www.securityfocus.com/bid/30107nvd
- www.securitytracker.com/idnvd
- www.ubuntu.com/usn/usn-631-1nvd
- www.vupen.com/english/advisories/2008/2024/referencesnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/43619nvd
- www.exploit-db.com/exploits/6032nvd
- www.redhat.com/archives/fedora-package-announce/2008-August/msg00161.htmlnvd
News mentions
0No linked articles in our index yet.