PT-2018-3613 · Poppler+4 · Poppler+4
Junchao Luan
·
Publicado
2018-05-10
·
Atualizado
2023-07-20
·
CVE-2017-18267
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Poppler versions 0.64.0 and earlier
Description
The issue is related to the FoFiType1C::cvtGlyph function in the Poppler library, which can cause a denial of service due to infinite recursion when processing a crafted PDF file. This can be exploited by remote attackers, as demonstrated by the pdftops tool. The vulnerability is associated with the infinite loop in the function.
Recommendations
For Poppler version 0.64.0 and earlier, consider updating to a newer version that contains a fix for this issue, as no specific workaround is provided for these versions.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Infinite Loop
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Poppler
Red Hat
Suse
Ubuntu