| Package | Affected versions | Patched versions |
|---|---|---|
| poppler | = 0.10.0= 0.10.1= 0.10.2= 0.10.3= 0.10.4= 0.10.5= 0.10.6= 0.10.7= 0.11.0= 0.11.1= 0.11.2= 0.11.3= 0.12.0= 0.12.1= 0.12.2= 0.12.3= 0.12.4= 0.13.0= 0.13.1= 0.13.2= 0.13.3= 0.13.4= 0.14.0= 0.14.1= 0.14.2= 0.14.3= 0.14.4= 0.14.5= 0.15.0= 0.15.1= 0.8.7= 0.9.0= 0.9.1= 0.9.2= 0.9.3 |
The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service (crash) via a PDF file that triggers an uninitialized pointer dereference.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free