CVE-2008-1693 - CVE House
Back to Database
Status published Medium CVE-2008-1693

The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0,...

Vulnerability Description

The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, related to dereferencing a function pointer associated with the type of this font object.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-1693

Credits & Attribution

No credits recorded in the NVD database.

References

More from poppler

View All →
CVE-2025-52886
Poppler Use After Free Vulnerability
Medium 5.5
CVE-2025-52885
GHSL-2025-042: Poppler has Use-After-Free
Medium 6.1
CVE-2012-2142
The error function in Error.cc in poppler before 0.21.4 allows...
High 7.8
CVE-2010-4654
poppler before 0.16.3 has malformed commands that may cause corruption...
High 7.8
CVE-2010-4653
An integer overflow condition in poppler before 0.16.3 can occur...
Medium 6.5

Affected Vendor

Affected Software

poppler
Vulnerable Versions:
0, 0.1, 0.1.1, 0.1.2, 0.2.0, 0.3.0, 0.3.1, 0.3.2, 0.3.3, 0.4.0, 0.4.1, 0.4.2, 0.4.3, 0.4.4, 0.5.0, 0.5.1, 0.5.2, 0.5.3, 0.5.4, 0.5.9, 0.5.91, 0.6.0, 0.6.1, 0.6.2, 0.6.3, 0.6.4, 0.7.0, 0.7.1, 0.7.2

Timeline

Official Publish: April 18th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.