Summary
It was discovered that poppler incorrectly handled certain PDF files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2018-16646, CVE-2018-19058, CVE-2018-19059, CVE-2018-19060)
It was discovered that poppler incorrectly handled certain PDF files.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
(CVE-2018-19149)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | poppler | 0.24.5-2ubuntu4.13 |
| Ubuntu · 16.04 LTS 16.04:LTS | poppler | 0.41.0-0ubuntu1.9 |
| Ubuntu · 18.04 LTS 18.04:LTS | poppler | 0.62.0-2ubuntu2.4 |
Vulnerabilities 5
-
Unscored —
In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote…
-
Unscored —
An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service becau…
-
Unscored —
An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in FileSpec.cc, will lead to…
-
Unscored —
An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial …
-
Unscored —
Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_att…