high8.8
CVE-2018-21009
Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.
Impact
Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freedesktop | Poppler | before 0.76.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitlab.freedesktop.org/poppler/poppler/commit/0868c499a9f5f37f8df5c9fef03c37496b40fc8a
- https://lists.debian.org/debian-lts-announce/2019/09/msg00033.html
- https://lists.debian.org/debian-lts-announce/2020/07/msg00018.html
- https://gitlab.freedesktop.org/poppler/poppler/commit/0868c499a9f5f37f8df5c9fef03c37496b40fc8a
- https://lists.debian.org/debian-lts-announce/2019/09/msg00033.html
- https://lists.debian.org/debian-lts-announce/2020/07/msg00018.html