Bug#921215: poppler: CVE-2019-7310: Heap buffer overflow in XRef::getEntry due to integer overflow
carnil at debian.org
Sun Feb 3 08:25:12 GMT 2019
Tags: security upstream
The following vulnerability was published for poppler.
| In Poppler 0.73.0, a heap-based buffer over-read (due to an integer
| signedness error in the XRef::getEntry function in XRef.cc) allows
| remote attackers to cause a denial of service (application crash) or
| possibly have unspecified other impact via a crafted PDF document, as
| demonstrated by pdftocairo.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
Please adjust the affected versions in the BTS as needed.
More information about the Pkg-freedesktop-maintainers