PT-2019-5324 · Poppler+6 · Poppler+6

Albert Astals Cid

·

Publicado

2019-07-11

·

Atualizado

2023-01-19

·

CVE-2019-14494

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Poppler versions through 0.78.0
Description The issue is related to a divide-by-zero error in the SplashOutputDev::tilingPatternFill function at SplashOutputDev.cc. This error can be exploited by a remote attacker to cause a denial of service.
Recommendations For Poppler versions through 0.78.0, as a temporary workaround, consider disabling the SplashOutputDev::tilingPatternFill function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Divide By Zero

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-369

Identificadores relacionados

ALSA-2020:4643
AZL-44472
BDU:2020-02393
CESA-2020_3977
CESA-2020_4643
CVE-2019-14494
DLA-2440-1
DLA-3120-1
MGASA-2019-0244
MGASA-2019-0245
OPENSUSE-SU-2021:3854-1
OPENSUSE-SU-2021_3854-1
RHSA-2020:3977
RHSA-2020:4643
RHSA-2020_3977
RHSA-2020_4643
SUSE-SU-2021:3854-1
SUSE-SU-2022:1723-1
SUSE-SU-2022:1724-1
SUSE-SU-2022_1723-1
SUSE-SU-2022_1724-1
USN-4091-1

Produtos afetados

Almalinux
Astra Linux
Centos
Poppler
Red Hat
Suse
Ubuntu