Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-9865

Опубликовано: 24 апр. 2017
Источник: redhat
CVSS3: 3.3

Описание

The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted PDF document, related to missing color-map validation in ImageOutputDev.cc.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5popplerWill not fix
Red Hat Enterprise Linux 6popplerWill not fix
Red Hat Enterprise Linux 7popplerWill not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-121
https://bugzilla.redhat.com/show_bug.cgi?id=1466435poppler: Buffer over-read in the GfxImageColorMap::getGray function

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 8 лет назад

The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted PDF document, related to missing color-map validation in ImageOutputDev.cc.

CVSS3: 5.5
nvd
больше 8 лет назад

The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted PDF document, related to missing color-map validation in ImageOutputDev.cc.

CVSS3: 5.5
debian
больше 8 лет назад

The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54. ...

CVSS3: 5.5
github
больше 3 лет назад

The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted PDF document, related to missing color-map validation in ImageOutputDev.cc.

suse-cvrf
больше 7 лет назад

Security update for poppler

3.3 Low

CVSS3