NetSight
IP …
high7.8

CVE-2019-7310

In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to caus…

Impact

In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document, as demonstrated by pdftocairo.

Affected products

VendorProductAffected versions
FreedesktopPoppler
Version 0.73.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 18.10
DebianDebian Linux
Versions 8.0, 9.0
FedoraprojectFedora
Version 28
RedhatEnterprise Linux
Version 8.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Eus
Versions 8.1, 8.2, 8.4
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Versions 8.2, 8.4
RedhatEnterprise Linux Server Tus
Versions 8.2, 8.4
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

CWE-125CWE-681

References