CVE-2017-9865

The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers to cause a denial of service stack-based buffer over-read and application crash via a crafted PDF document, related to missing color-map validation in ImageOutputDev.cc...

CVE-2017-9865

CVE-2017-9865 : In Poppler 0.54.0, the function GfxImageColorMap::getGray in GfxState.cc can trigger a denial of service via a crafted PDF, due to missing color-map validation in ImageOutputDev.cc. The issue enables a stack-based buffer over-read that can crash the application. The vulnerability ...