poppler - security update

Fixed packages 1

Vulnerabilities 8

• Unscored —
  CVE-2017-18267

  The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a de…

  poppler poppler Debian Ubuntu
  May 10, 2018
• Unscored —
  CVE-2018-16646

  In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote…

  poppler poppler Debian Ubuntu
  Sep 6, 2018
• Unscored —
  CVE-2018-20481

  XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause…

  poppler poppler Debian Ubuntu
  Dec 26, 2018
• Unscored —
  CVE-2018-21009

  Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.

  poppler poppler Debian Ubuntu
  Sep 5, 2019
• Unscored —
  CVE-2019-10872

  An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTranspare…

  poppler poppler Debian Ubuntu
  Apr 5, 2019
• Unscored —
  CVE-2019-12293

  In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with…

  poppler poppler Debian Ubuntu
  May 23, 2019
• Unscored —
  CVE-2019-9200

  A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for ex…

  poppler poppler Debian Ubuntu
  Feb 26, 2019
• Unscored —
  CVE-2019-9631

  Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function.

  poppler poppler Debian Ubuntu
  Mar 8, 2019