CVE-2017-14928
- EPSS 0.29%
- Veröffentlicht 30.09.2017 01:29:02
- Zuletzt bearbeitet 20.04.2025 01:37:25
In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Configuration::Configuration in Annot.cc via a crafted PDF document.
CVE-2017-14927
- EPSS 0.26%
- Veröffentlicht 30.09.2017 01:29:02
- Zuletzt bearbeitet 20.04.2025 01:37:25
In Poppler 0.59.0, a NULL Pointer Dereference exists in the SplashOutputDev::type3D0() function in SplashOutputDev.cc via a crafted PDF document.
CVE-2017-14926
- EPSS 0.29%
- Veröffentlicht 30.09.2017 01:29:02
- Zuletzt bearbeitet 20.04.2025 01:37:25
In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Content::Content in Annot.cc via a crafted PDF document.
CVE-2017-14617
- EPSS 0.53%
- Veröffentlicht 20.09.2017 21:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files.
CVE-2017-14518
- EPSS 0.35%
- Veröffentlicht 17.09.2017 23:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
In Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired() function in Splash.cc via a crafted PDF document.
CVE-2017-14517
- EPSS 0.41%
- Veröffentlicht 17.09.2017 23:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
In Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry() function in XRef.cc via a crafted PDF document.
CVE-2017-14519
- EPSS 0.44%
- Veröffentlicht 17.09.2017 23:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
In Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opShowText, and Gfx::doShowText calls (aka a Gfx.cc infinite loop).
CVE-2017-14520
- EPSS 0.29%
- Veröffentlicht 17.09.2017 23:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd() in Splash.cc, which may lead to a potential attack when handling malicious PDF files.
CVE-2017-2820
- EPSS 1.22%
- Veröffentlicht 12.07.2017 17:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Poppler 0.53.0. A specially crafted PDF file can lead to an integer overflow causing out of bounds memory overwrite on the heap resul...
CVE-2017-2818
- EPSS 0.5%
- Veröffentlicht 12.07.2017 17:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted PDF can cause an overly large number of color components during image rendering, resulting in heap corruption. An attacke...