Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-14977

Опубликовано: 30 сент. 2017
Источник: redhat
CVSS3: 3.3

Описание

The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table pointer, which allows an attacker to launch a denial of service attack.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5popplerWill not fix
Red Hat Enterprise Linux 6popplerWill not fix
Red Hat Enterprise Linux 7popplerWill not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=1500344poppler: NULL pointer dereference in the FoFiTrueType::getCFFBlock function

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 8 лет назад

The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table pointer, which allows an attacker to launch a denial of service attack.

CVSS3: 7.5
nvd
больше 8 лет назад

The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table pointer, which allows an attacker to launch a denial of service attack.

CVSS3: 7.5
debian
больше 8 лет назад

The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0 ...

CVSS3: 7.5
github
больше 3 лет назад

The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table pointer, which allows an attacker to launch a denial of service attack.

suse-cvrf
больше 7 лет назад

Security update for poppler

3.3 Low

CVSS3