Описание
A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 0.62.0-2ubuntu2.8 |
| cosmic | released | 0.68.0-0ubuntu1.6 |
| devel | not-affected | 0.76.1-0ubuntu3 |
| disco | released | 0.74.0-0ubuntu1.2 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [0.24.5-2ubuntu4.17]] |
| esm-infra/bionic | not-affected | 0.62.0-2ubuntu2.8 |
| esm-infra/xenial | not-affected | 0.41.0-0ubuntu1.13 |
| precise/esm | DNE | |
| trusty | released | 0.24.5-2ubuntu4.17 |
| trusty/esm | DNE | trusty was released [0.24.5-2ubuntu4.17] |
Показывать по
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3
Связанные уязвимости
A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
A heap-based buffer underwrite exists in ImageStream::getLine() locate ...
A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Уязвимость метода ImageStream::getLine из poppler/Stream.cc библиотеки для отображения PDF-файлов Poppler, связанная с записью за границами буфера, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3