PT-2019-2633 · Poppler+1 · Poppler+1

Publicado 2019-04-05 · Atualizado 2019-09-06 · CVE-2019-10873

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Poppler version 0.74.0

Description The issue is related to a NULL pointer dereference in the SplashClip::clipAALine function at splash/SplashClip.cc. This could allow a remote attacker to cause a denial of service using a specially crafted PDF document.

Recommendations For Poppler version 0.74.0, consider disabling the SplashClip::clipAALine function as a temporary workaround until a patch is available.

Exploit

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

BDU:2019-02518

CVE-2019-10873

MGASA-2019-0245

USN-4042-1

Produtos afetados

Poppler

Ubuntu

Referências · 61

• 🔥 https://gitlab.freedesktop.org/poppler/poppler/issues/748 · Exploit
• https://ubuntu.com/security/CVE-2018-18897 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20662 · Nota de Segurança
• https://securityfocus.com/bid/107862/info · Nota
• https://forum.xpdfreader.com/viewtopic.php?f=3&t=41275 · Nota
• https://forum.xpdfreader.com/viewtopic.php?f=3&t=41274 · Nota
• https://access.redhat.com/errata/RHSA-2019:2022 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9903 · Nota de Segurança
• https://ubuntu.com/security/CVE-2019-10018 · Aviso do Fabricante
• https://research.loginsoft.com/bugs/stack-based-buffer-overflows-in-dictfind-poppler-0-74-0 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-10873 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2019-0245 · Aviso do Fabricante
• https://usn.ubuntu.com/4042-1 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2019-0245.html · Nota de Segurança
• https://bdu.fstec.ru/vul/2021-03434 · Nota de Segurança