Bug#923414: poppler: CVE-2019-9200
carnil at debian.org
Wed Feb 27 20:27:23 GMT 2019
Tags: security upstream
The following vulnerability was published for poppler.
| A heap-based buffer underwrite exists in ImageStream::getLine() located
| at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by
| sending a crafted PDF file to the pdfimages binary. It allows an
| attacker to cause Denial of Service (Segmentation fault) or possibly
| have unspecified other impact.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
Please adjust the affected versions in the BTS as needed.
More information about the Pkg-freedesktop-maintainers