Lucene search
+L

49 matches found

Tenable Nessus
Tenable Nessus
•added 2020/11/18 12:00 a.m.•41 views

Amazon Linux AMI : poppler (ALAS-2020-1450)

The version of poppler installed on the remote host is prior to 0.26.5-43.22. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1450 advisory. A divide-by-zero error was found in the way Poppler handled certain PDF files. A remote attacker could exploit this flaw by...

7.5CVSS7.2AI score0.02679EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2020/11/03 12:00 a.m.•35 views

EulerOS 2.0 SP2 : poppler (EulerOS-SA-2020-2386)

According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent...

8.8CVSS7AI score0.02679EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
•added 2020/10/21 12:00 a.m.•38 views

Scientific Linux Security Update : evince and poppler on SL7.x x86_64 (20201001)

Security Fixes : - poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc CVE-2019-14494 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141747; scriptversion"1.3";...

7.5CVSS7.1AI score0.02679EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2020/09/29 7:37 p.m.•14 views

poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc

A divide-by-zero error was found in the way Poppler handled certain PDF files. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by an application linked to Poppler, would crash the application causing a denial of service...

7.5CVSS5.8AI score0.02679EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2020/09/28 12:00 a.m.•37 views

EulerOS 2.0 SP3 : poppler (EulerOS-SA-2020-2106)

According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent...

8.8CVSS7AI score0.02679EPSS
SaveExploits2References3
BDU FSTEC
BDU FSTEC
•added 2020/05/29 12:00 a.m.•13 views

The vulnerability of the SplashOutputDev::tilingPatternFill function (SplashOutputDev.cc), a library for displaying PDF files in Poppler, allows a hacker to trigger a service failure.

The vulnerability of the SplashOutputDev::tilingPatternFill function SplashOutputDev.cc, which is part of the Poppler PDF rendering library, is related to division by zero errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

7.5CVSS6.8AI score0.02679EPSS
SaveExploits1References19Affected Software8
Veracode
Veracode
•added 2019/08/06 5:13 a.m.•39 views

Denial Of Service (DoS)

libpoppler.so is vulnerable to denial of service DoS. The attack exists because it does not prevent having integer overflow in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc...

7.5CVSS3.8AI score0.02679EPSS
SaveExploits1References10Affected Software3
CNVD
CNVD
•added 2019/08/02 12:00 a.m.•11 views

Poppler De-Zero Error Vulnerability

Poppler is based on xpdf-3.0 code base PDF rendering library. A divide-by-zero error vulnerability exists in the SplashOutputDev::tilingPatternFill function in SplashOutputDev.cc in Poppler 0.78.0 and earlier versions, which can be exploited by an attacker to cause a denial of service...

7.5CVSS8.4AI score0.02679EPSS
SaveExploits1References1
OSV
OSV
•added 2019/08/01 5:15 p.m.•35 views

CVE-2019-14494

An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc...

7.5CVSS6.6AI score
SaveExploits0References7
Snyk
Snyk
•added 2019/08/01 5:15 p.m.•6 views

Divide By Zero

Overview Affected versions of this package are vulnerable to Divide By Zero. An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc. Details Denial of Service DoS describes a family of attacks, al...

7.5CVSS7.1AI score0.02679EPSS
SaveExploits1References2
Prion
Prion
•added 2019/08/01 5:15 p.m.•34 views

Design/Logic Flaw

An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc...

4.3CVSS7.3AI score0.02679EPSS
SaveExploits1References7Affected Software5
Cvelist
Cvelist
•added 2019/08/01 4:05 p.m.•55 views

CVE-2019-14494

An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc...

7.5AI score0.02679EPSS
SaveExploits1References7
CVE
CVE
•added 2019/08/01 4:05 p.m.•431 views

CVE-2019-14494

Poppler vulnerability CVE-2019-14494 is a divide-by-zero in SplashOutputDev::tilingPatternFill (Poppler up to 0.78.0). The issue affects Poppler-based rendering and can enable denial of service when processing malicious PDFs. Connected advisories (ALAS, Debian LTS, AlmaLinux, CentOS/RHEL, etc.) i...

7.5CVSS7.3AI score0.02679EPSS
SaveExploits1References7Affected Software1
Debian CVE
Debian CVE
•added 2019/08/01 4:05 p.m.•33 views

CVE-2019-14494

An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc...

7.5CVSS8.1AI score0.02679EPSS
SaveExploits1
OSV
OSV
•added 2019/08/01 12:00 a.m.•12 views

UBUNTU-CVE-2019-14494

An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc...

7.5CVSS6.8AI score0.02679EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2019/08/01 12:00 a.m.•40 views

CVE-2019-14494

An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc...

7.5CVSS6.8AI score0.02679EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/01 12:00 a.m.•4 views

CVE-2019-14494: Divide By Zero

An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc...

7.5CVSS7.4AI score0.02679EPSS
SaveExploits1References2
OSS-Fuzz
OSS-Fuzz
•added 2018/07/15 5:16 a.m.•29 views

poppler/pdf_fuzzer: Use-of-uninitialized-value in SampledFunction::transform

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=4888468869087232 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

5.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2018/06/01 3:18 p.m.•21 views

poppler/pdf_fuzzer: Use-of-uninitialized-value in Splash::fillGlyph2

Detailed report: https://oss-fuzz.com/testcase?key=5830388655063040 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Splash::fillGlyph2...

6.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2018/05/25 8:53 a.m.•31 views

poppler/pdf_fuzzer: Use-of-uninitialized-value in FT_Set_Transform

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=6193455704309760 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

5.8AI score
SaveExploits0Affected Software1
Rows per page
Query Builder