Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
21 Nov 2024, 03:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/148661/PDFunite-0.62.0-Buffer-Overflow.html - Third Party Advisory, VDB Entry | |
| References | () https://access.redhat.com/errata/RHBA-2019:0327 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2018:3140 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2018:3505 - Third Party Advisory | |
| References | () https://bugzilla.novell.com/show_bug.cgi?id=CVE-2018-13988 - Issue Tracking, Third Party Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=1602838 - Issue Tracking, Third Party Advisory | |
| References | () https://cgit.freedesktop.org/poppler/poppler/commit/?id=004e3c10df0abda214f0c293f9e269fdd979c5ee - Patch, Vendor Advisory | |
| References | () https://lists.debian.org/debian-lts-announce/2018/10/msg00024.html - Mailing List, Third Party Advisory | |
| References | () https://usn.ubuntu.com/3757-1/ - Third Party Advisory |
Information
Published : 2018-07-25 23:29
Updated : 2024-11-21 03:48
NVD link : CVE-2018-13988
Mitre link : CVE-2018-13988
CVE.ORG link : CVE-2018-13988
JSON object : View
Products Affected
redhat
- enterprise_linux_server
- enterprise_linux_desktop
- ansible_tower
- openshift_container_platform
- enterprise_linux_workstation
freedesktop
- poppler
canonical
- ubuntu_linux
debian
- debian_linux
CWE
CWE-125
Out-of-bounds Read