Denial Of Service (DoS)

libpoppler.so is vulnerable to a Denial Of Service DoS. The library does not validate stream methods before calling them, allowing a malicious user to pass a file to the application to call a reachable abort function, stopping the application...

Integer Overflow

libpoppler.so is vulnerable to integer overflows. A malicious user can pass a PDF file with an embedded JPEG 2000 encoded image in it to cause an integer overflow that can crash the application or cause arbitrary code to be executed...

Denial Of Service (DoS)

libpoppler.so is vulnerabler to denial of service DoS attacks. A malicious user can pass a pdf file with a out-of-bounds dictionary index to the application to cause a buffer overflow, crashing the application...

MGASA-2018-0083 Updated poppler packages fix security vulnerability

freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations CVE-2017-1000456...

Freedesktop.org libpoppler Denial of Service Vulnerability

freedesktop.org libpoppler is a C++ class library for generating PDFs, which is inherited from Xpdf PDF reader. A security vulnerability exists in the 'TextPool::addWord' function in version 0.60.1 of freedesktop.org libpoppler, which stems from the program failing to validate boundaries. An...

CVE-2017-1000456

freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations...

CVE-2017-1000456

freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations. Remediation There is no fixed version for poppler. References - Bugs.freedesktop.org...

DEBIAN-CVE-2017-1000456

freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations...

CVE-2017-1000456

CVE-2017-1000456 affects freedesktop.org libpoppler 0.60.1 . The issue is a lack of proper boundary validation in TextPool::addWord, causing an overflow in subsequent calculations. This is the concrete vulnerability described in the initial record, and is echoed by multiple Nessus/OSINT entries r...

CVE-2017-1000456

freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations...

CVE-2017-1000456

freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations...

CVE-2017-1000456

freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations...

openSUSE Security Update : libpoppler-devel (openSUSE-SU-2010:0976-1)

Specially crafted PDF files could crash poppler or potentially even cause execution of arbitrary code CVE-2010-3702, CVE-2010-3704 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

SuSE 11.1 Security Update : libpoppler (SAT Patch Number 3338)

Specially crafted PDF files could crash poppler or potentially even cause execution of arbitrary code CVE-2010-3702 / CVE-2010-3703 / CVE-2010-3704. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 11 Security Update : libpoppler (SAT Patch Number 3337)

Specially crafted PDF files could crash poppler or potentially even cause execution of arbitrary code CVE-2010-3702 / CVE-2010-3704. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 10 Security Update : libpoppler (ZYPP Patch Number 7192)

Specially crafted PDF files could crash poppler or potentially even cause execution of arbitrary code. CVE-2010-3702 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

openSUSE Security Update : libpoppler-devel (libpoppler-devel-1735)

This update of libpoppler5 fixes various security issues. CVE-2009-0791: Fix multiple integer overflows in 'pdftops' filter that could be used by attackers to execute code. CVE-2009-3607: Integer overflow in the createsurfacefromthumbnaildata function in glib/poppler-page.cc in Poppler 0.x allows...

openSUSE Security Update : libpoppler-devel (libpoppler-devel-1740)

This update of libpoppler3 fixes various security issues. CVE-2009-0791: Fix multiple integer overflows in 'pdftops' filter that could be used by attackers to execute code. CVE-2009-3607: Integer overflow in the createsurfacefromthumbnaildata function in glib/poppler-page.cc in Poppler 0.x allows...

SuSE 11 Security Update : libpoppler (SAT Patch Number 1731)

This update of libpoppler4 fixes various security issues. - Fix multiple integer overflows in 'pdftops' filter that could be used by attackers to execute code. CVE-2009-0791 - Integer overflow in the createsurfacefromthumbnaildata function in glib/poppler-page.cc in Poppler 0.x allows remote...