NetSight
IP …
medium6.5

CVE-2018-20662

In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong r…

Impact

In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.

Affected products

VendorProductAffected versions
FreedesktopPoppler
Version 0.72.0
DebianDebian Linux
Versions 8.0, 9.0
FedoraprojectFedora
Versions 28, 29, 30
CanonicalUbuntu Linux
Versions 16.04, 18.04, 18.10, 19.04
RedhatEnterprise Linux
Version 8.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Eus
Versions 8.1, 8.2, 8.4, 8.6
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Versions 8.2, 8.4, 8.6
RedhatEnterprise Linux Server Tus
Versions 8.2, 8.4, 8.6
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

CWE-20

References