CVE-2017-1000440

CVE-2017-14976 is a Poppler vulnerability: a heap-based buffer over-read in FoFiType1C.cc occurs when an out-of-bounds font dictionary index is encountered, potentially enabling a DoS. Public-fix notes in openSUSE/SUSE advisories show this CVE fixed in the Poppler updates (e.g., openSUSE-2018-648...

[SECURITY] [DLA 1177-1] poppler security update

Package : poppler Version : 0.18.4-6+deb7u4 CVE ID : CVE-2017-14975 CVE-2017-14976 CVE-2017-14977 CVE-2017-15565 Debian Bug : 879066 877952 877954 877957 It was discovered that poppler, a PDF rendering library, was affected by several denial-of-service application crash, null pointer dereferences...

Fedora Update for mingw-poppler FEDORA-2017-6127ddb036

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 25 : mingw-poppler (2017-6127ddb036)

This update fixes the following security vulnerabilities : - CVE-2017-14517 - CVE-2017-14518 - CVE-2017-14519 - CVE-2017-14617 - CVE-2017-14926 - CVE-2017-14927 - CVE-2017-14928 - CVE-2017-14929 - CVE-2017-14975 and CVE-2017-14976 - CVE-2017-14977 Note that Tenable Network Security has extracted...

Fedora 26 : mingw-poppler (2017-a0ffdf1fbd)

This update fixes the following security vulnerabilities : - CVE-2017-14517 - CVE-2017-14518 - CVE-2017-14519 - CVE-2017-14617 - CVE-2017-14926 - CVE-2017-14927 - CVE-2017-14928 - CVE-2017-14929 - CVE-2017-14975 and CVE-2017-14976 - CVE-2017-14977 Note that Tenable Network Security has extracted...

CVE-2017-14976

The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a heap-based buffer over-read vulnerability if an out-of-bounds font dictionary index is encountered, which allows an attacker to launch a denial of service attack...

CVE-2017-14976

CVE-2017-14976 affects Poppler 0.59.0 via FoFiType1C::convertToType0, which may perform a heap-based buffer over-read when encountering an out-of-bounds font dictionary index, enabling denial of service. Public fixes are shown in openSUSE/SUSE advisories (e.g., openSUSE-2018-648) that list CVE-20...