| Package | Affected versions | Patched versions |
|---|---|---|
| cups | ≤ 1.3.11 | |
| poppler | ≥ 0.8.7, ≤ 0.15.1 | |
| xpdf | = 3.02≤ 3.01 |
The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free