Lucene search
Ubuntu.comUB:CVE-2019-16115HistorySep 08, 2019 - 12:00 a.m.
CVE-2019-16115
2019-09-0800:00:00
ubuntu.com
ubuntu.com
6
0.001 Low
EPSS
Percentile
32.1%
In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in
IdentityFunction::transform in Function.cc, used by
GfxAxialShading::getColor. It can, for example, be triggered by sending a
crafted PDF document to the pdftoppm tool. It allows an attacker to use a
crafted PDF file to cause Denial of Service or possibly unspecified other
impact.
Notes
| Author | Note |
|---|---|
| jdstrand | xpdf in koffice is 2.0 |
| mdeslaur | no indication that this affects poppler |
| ebarretto | xpdf in Debian uses poppler, which is not affected or fixed |
Related
symantec
symantec
Xpdf CVE-2019-16115 Buffer Underflow Vulnerability
2019-09-04 00:00:00
cve
cve
CVE-2019-16115
2019-09-08 22:15:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:3399-1)
2023-08-24 00:00:00
openSUSE: Security Advisory for poppler (SUSE-SU-2023:3292-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for poppler (SUSE-SU-2023:3241-1)
2024-03-04 00:00:00
cvelist
cvelist
CVE-2019-16115
2019-09-08 21:47:57
debiancve
debiancve
CVE-2019-16115
2019-09-08 22:15:00
prion
prion
Stack overflow
2019-09-08 22:15:00
nessus
nessus
SUSE SLES12 Security Update : poppler (SUSE-SU-2023:3399-1)
2023-08-24 00:00:00
SUSE SLES12 Security Update : poppler (SUSE-SU-2023:3303-1)
2023-08-15 00:00:00