Summary
It was discovered that Poppler incorrectly handled certain files.
If a user or automated system were tricked into opening a
crafted PDF file, an attacker could cause a denial service.
This issue only affected Ubuntu 17.04. (CVE-2017-14517)
It was discovered that Poppler incorrectly handled certain files.
If a user or automated system were tricked into opening a crafted PDF file,
an attacker could cause a denial of service. (CVE-2017-14519)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | poppler | 0.24.5-2ubuntu4.6 |
| Ubuntu · 16.04 LTS 16.04:LTS | poppler | 0.41.0-0ubuntu1.3 |
Vulnerabilities 1
-
Unscored —
In Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after a repeating series of …