Описание
In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 0.62.0-2ubuntu2.9 |
| cosmic | released | 0.68.0-0ubuntu1.7 |
| devel | not-affected | 0.76.1-0ubuntu3 |
| disco | released | 0.74.0-0ubuntu1.2 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | not-affected | 0.62.0-2ubuntu2.9 |
| esm-infra/xenial | not-affected | 0.41.0-0ubuntu1.14 |
| precise/esm | DNE | |
| trusty | ignored | end of standard support |
| trusty/esm | DNE |
Показывать по
6.8 Medium
CVSS2
8.8 High
CVSS3
Связанные уязвимости
In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths.
In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths.
In Poppler through 0.76.1, there is a heap-based buffer over-read in J ...
In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths.
Уязвимость функции JPXStream::init библиотеки для отображения PDF-файлов Poppler, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
6.8 Medium
CVSS2
8.8 High
CVSS3