The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and previous versions deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote malicious users to execute arbitrary code via a crafted PDF document.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
poppler poppler |