Debian/poppler: high 8.8
A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by sending a crafted PDF file to the pdfimages binary. It all
Action: Upgrade poppler to 0.71.0-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.71.0-4 | - |
Fixed versions
| 0.71.0-4 |
Sources
- osv: DEBIAN-CVE-2019-9200#Debian:14/poppler
- https://security-tracker.debian.org/tracker/CVE-2019-9200
published · modified · JSON