Summary
It was discovered that Poppler incorrectly handled certain files. If a user
or automated system were tricked into opening a crafted PDF file, an
attacker could cause a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | poppler | 0.41.0-0ubuntu1.15 |
| Ubuntu · 18.04 LTS 18.04:LTS | poppler | 0.62.0-2ubuntu2.11 |
Vulnerabilities 5
-
Unscored —
Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.
-
Unscored —
An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPag…
-
Unscored —
In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in strncpy from FoFiType1::parse in fofi/FoFiType1.cc…
-
Unscored —
The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading …
-
Unscored —
A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this…