PT-2008-3238 · Poppler+1 · Poppler+1
Publicado
2008-04-17
·
Atualizado
2024-06-15
·
CVE-2008-1693
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Poppler versions prior to 0.8.0
Description
The issue is related to the improper handling of embedded fonts in PDF files by the CairoFont::create function. This allows remote attackers to execute arbitrary code via a crafted font object, specifically through dereferencing a function pointer associated with the type of this font object. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.
Recommendations
For Poppler versions prior to 0.8.0, update to version 0.8.0 or later to resolve the issue. As a temporary workaround, consider restricting the handling of embedded fonts in PDF files until a patch is available.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Poppler
Red Hat