PT-2017-13795 · Poppler+2 · Poppler+2

Junchao Luan

·

Publicado

2017-10-01

·

Atualizado

2019-05-03

·

CVE-2017-14975

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Poppler version 0.59.0
Description The issue is related to a NULL pointer dereference vulnerability in the FoFiType1C::convertToType0 function, located in FoFiType1C.cc. This vulnerability occurs because a data structure is not properly initialized, allowing an attacker to launch a denial of service attack.
Recommendations For Poppler version 0.59.0, consider applying a patch or fix that properly initializes the data structure used by the FoFiType1C::convertToType0 function to prevent the NULL pointer dereference. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2017-14975
DLA-1177-1
DSA-4079-1
MGASA-2017-0378
OPENSUSE-SU-2018_1721-1
SUSE-SU-2018:1662-1
USN-3440-1

Produtos afetados

Poppler
Suse
Ubuntu