← Database

CVE-2008-2950

HIGH CVSS: 7.5 Published: 2008-07-07 Modified: 2026-06-16

Description

The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document.

Affected Platforms

Poppler Poppler

Weakness Type

CWE-94

References