Описание
In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 0.62.0-2ubuntu2.9 |
| cosmic | released | 0.68.0-0ubuntu1.7 |
| devel | not-affected | 0.76.1-0ubuntu3 |
| disco | released | 0.74.0-0ubuntu1.2 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was deferred [2019-03-28]] |
| esm-infra/bionic | not-affected | 0.62.0-2ubuntu2.9 |
| esm-infra/xenial | not-affected | 0.41.0-0ubuntu1.14 |
| precise/esm | DNE | |
| trusty | ignored | end of standard support |
| trusty/esm | DNE | trusty was deferred [2019-03-28] |
Показывать по
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.
In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.
In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to caus ...
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3