| Package | Affected versions | Patched versions |
|---|---|---|
| poppler | = 0.1= 0.1.1= 0.1.2= 0.10.1= 0.10.2= 0.2.0= 0.3.0= 0.3.1= 0.3.2= 0.3.3= 0.4.0= 0.4.1= 0.4.2= 0.4.3= 0.4.4= 0.5.0= 0.5.1= 0.5.2= 0.5.3= 0.5.4= 0.5.9= 0.5.90= 0.5.91= 0.6.0= 0.6.1= 0.6.2= 0.6.3= 0.6.4= 0.7.0= 0.7.1= 0.7.2= 0.7.3= 0.8.4≤ 0.10.3 |
The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::~JBIG2SymbolDict and triggers an invalid memory dereference.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free