tocsin

Debian/poppler: unknown

The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arb

Action: Upgrade poppler to 0.8.4-1.1 or later.

Affected

introducedfixedlast affected
00.8.4-1.1-

Fixed versions

0.8.4-1.1

Sources

published · modified · JSON