Unscored severity · published Apr 18, 2008
CVE-2008-1693
The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle…
–
CVSS
4.9%
EPSS
No
On KEV
Description
The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, related to dereferencing a function pointer associated with the type of this font object.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.9% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PO
Poppler · Poppler
through 0.7.3; 0.1; 0.1.1; 0.1.2; 0.2.0; 0.3.0; +23 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1693
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1693
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html
secunia.com
http://secunia.com/advisories/29816
secunia.com
http://secunia.com/advisories/29834
secunia.com
http://secunia.com/advisories/29836
secunia.com
http://secunia.com/advisories/29851
secunia.com
http://secunia.com/advisories/29853
More from Poppler
6.1
CVE-2025-52885
GHSL-2025-042: Poppler has Use-After-Free
5.9
CVE-2025-52886
Poppler Use After Free Vulnerability
–
CVE-2010-3704
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly…
–
CVE-2010-3703
The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other…
–
CVE-2009-3938
Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc in Poppler (aka libpoppler) 0.10.6, 0.12.0, and possibly other versions, as used by the Abiword…