NetSight
IP …
medium6.5

CVE-2018-13988

Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by …

Impact

Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.

Affected products

VendorProductAffected versions
FreedesktopPoppler
through 0.62.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04
DebianDebian Linux
Version 8.0
RedhatAnsible Tower
Version 3.3.0
RedhatOpenshift Container Platform
Version 3.11
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

CWE-125

References