Debian/poppler: high 7.8
In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of service (application crash)
Action: Upgrade poppler to 0.71.0-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.71.0-4 | - |
Fixed versions
| 0.71.0-4 |
Sources
- osv: DEBIAN-CVE-2019-7310#Debian:14/poppler
- https://security-tracker.debian.org/tracker/CVE-2019-7310
published · modified · JSON