Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

freedesktop poppler 0.54.0 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2017-9083
poppler 0.54.0, as used in Evince and other products, has a NULL pointer dereference in the JPXStream::readUByte function in JPXStream.cc. For example, the perf_test utility will crash (segmentation fault) when parsing an invalid PDF file.
Freedesktop Poppler 0.54.0
4.3
CVSSv2
CVE-2017-9406
In Poppler 0.54.0, a memory leak vulnerability was found in the function gmalloc in gmem.cc, which allows malicious users to cause a denial of service via a crafted file.
Freedesktop Poppler 0.54.0Debian Debian Linux 9.0Debian Debian Linux 8.0
4.3
CVSSv2
CVE-2017-9408
In Poppler 0.54.0, a memory leak vulnerability was found in the function Object::initArray in Object.cc, which allows malicious users to cause a denial of service via a crafted file.
Freedesktop Poppler 0.54.0Debian Debian Linux 8.0Debian Debian Linux 9.0
4.3
CVSSv2
CVE-2017-9865
The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote malicious users to cause a denial of service (stack-based buffer over-read and application crash) via a crafted PDF document, related to missing color-map validation in ImageOutputDev.cc.
Freedesktop Poppler 0.54.0Debian Debian Linux 8.0Debian Debian Linux 9.0
4.3
CVSSv2
CVE-2017-7511
poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents.
Freedesktop Poppler 0.54.0Freedesktop Poppler 0.53.0Freedesktop Poppler 0.52.0Freedesktop Poppler 0.45.0Freedesktop Poppler 0.44.0Freedesktop Poppler 0.37.0Freedesktop Poppler 0.36.0Freedesktop Poppler 0.28.1Freedesktop Poppler 0.28.0Freedesktop Poppler 0.25.3Freedesktop Poppler 0.25.2Freedesktop Poppler 0.24.1Freedesktop Poppler 0.24.0Freedesktop Poppler 0.22.3Freedesktop Poppler 0.22.2Freedesktop Poppler 0.21.0Freedesktop Poppler 0.20.5Freedesktop Poppler 0.19.3Freedesktop Poppler 0.19.2Freedesktop Poppler 0.17.4Freedesktop Poppler 0.17.3Freedesktop Poppler 0.55.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook