Poppler · Poppler · CVE-2017-14976
**Name of the Vulnerable Software and Affected Versions**
Poppler version 0.59.0
**Description**
The issue arises from a heap-based buffer over-read in the FoFiType1C::convertToType0 function, located in FoFiType1C.cc. This occurs when an out-of-bounds font dictionary index is encountered, allowing an attacker to potentially launch a denial of service attack.
**Recommendations**
For Poppler version 0.59.0, consider applying a patch or updating to a newer version that addresses this issue, if available. As a temporary workaround, restrict access to potentially malicious font files to minimize the risk of exploitation.