| Max CVSS | 6.8 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-9406 | 4.3 |
In Poppler 0.54.0, a memory leak vulnerability was found in the function gmalloc in gmem.cc, which allows attackers to cause a denial of service via a crafted file.
|
03-10-2019 - 00:03 | 02-06-2017 - 19:29 | |
| CVE-2017-9865 | 4.3 |
The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted PDF document, related to missing color-map validation in I
|
03-10-2019 - 00:03 | 25-06-2017 - 13:29 | |
| CVE-2017-9408 | 4.3 |
In Poppler 0.54.0, a memory leak vulnerability was found in the function Object::initArray in Object.cc, which allows attackers to cause a denial of service via a crafted file.
|
03-10-2019 - 00:03 | 02-06-2017 - 19:29 | |
| CVE-2017-14519 | 5.0 |
In Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opShowText, and Gfx::doShowText calls (aka a Gfx.cc infinite loop).
|
03-10-2019 - 00:03 | 17-09-2017 - 23:29 | |
| CVE-2017-14975 | 5.0 |
The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability because a data structure is not initialized, which allows an attacker to launch a denial of service attack.
|
03-05-2019 - 20:15 | 02-10-2017 - 01:29 | |
| CVE-2017-14976 | 5.0 |
The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a heap-based buffer over-read vulnerability if an out-of-bounds font dictionary index is encountered, which allows an attacker to launch a denial of service attack.
|
03-05-2019 - 20:14 | 02-10-2017 - 01:29 | |
| CVE-2017-14977 | 5.0 |
The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table pointer, which allows an attacker to launch a denial of service attack.
|
03-05-2019 - 20:05 | 02-10-2017 - 01:29 | |
| CVE-2017-15565 | 6.8 |
In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine() function in GfxState.cc via a crafted PDF document.
|
14-03-2019 - 17:42 | 17-10-2017 - 22:29 | |
| CVE-2017-9776 | 6.8 |
Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document.
|
12-03-2019 - 17:27 | 22-06-2017 - 21:29 | |
| CVE-2017-9775 | 4.3 |
Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document.
|
12-03-2019 - 17:25 | 22-06-2017 - 21:29 | |
| CVE-2017-14517 | 4.3 |
In Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry() function in XRef.cc via a crafted PDF document.
|
18-01-2019 - 11:29 | 17-09-2017 - 23:29 | |
| CVE-2017-14518 | 6.8 |
In Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired() function in Splash.cc via a crafted PDF document.
|
09-01-2018 - 02:29 | 17-09-2017 - 23:29 | |
| CVE-2017-14520 | 6.8 |
In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd() in Splash.cc, which may lead to a potential attack when handling malicious PDF files.
|
09-01-2018 - 02:29 | 17-09-2017 - 23:29 |