PT-2018-3613 · Poppler+4 · Poppler+4

Junchao Luan · Published 2018-05-10 · Updated 2023-07-20 · CVE-2017-18267

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Poppler versions 0.64.0 and earlier

Description The issue is related to the FoFiType1C::cvtGlyph function in the Poppler library, which can cause a denial of service due to infinite recursion when processing a crafted PDF file. This can be exploited by remote attackers, as demonstrated by the pdftops tool. The vulnerability is associated with the infinite loop in the function.

Recommendations For Poppler version 0.64.0 and earlier, consider updating to a newer version that contains a fix for this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

BDU:2021-01314

CESA-2018_3140

CVE-2017-18267

DLA-1562-1

DLA-2287-1

MGASA-2018-0290

OPENSUSE-SU-2021:3854-1

OPENSUSE-SU-2021_3854-1

RHSA-2018:3140

RHSA-2018_3140

SUSE-SU-2021:3854-1

SUSE-SU-2021_3854-1

SUSE-SU-2023:2906-1

SUSE-SU-2023:2907-1

SUSE-SU-2023_2906-1

SUSE-SU-2023_2907-1

USN-3647-1

Affected Products

Centos

Poppler

Red Hat

Suse

Ubuntu

References · 820

• 🔥 https://github.com/Metnew/uxss-db/tree/master/webkit/CVE-2018-4204 · Exploit
• 🔥 https://github.com/mwrlabs/CVE-2018-4121 · Exploit
• 🔥 https://github.com/FSecureLABS/CVE-2018-4121 · Exploit
• 🔥 https://bugzilla.freedesktop.org/show_bug.cgi?id=103238 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10767 · Security Note
• https://usn.ubuntu.com/3647-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13988 · Security Note
• https://bdu.fstec.ru/vul/2022-06890 · Security Note
• https://security-tracker.debian.org/tracker/DLA-2287-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-18267 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9381 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11712 · Security Note
• https://bdu.fstec.ru/vul/2021-01304 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-18267 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2862 · Security Note