[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249461

 
 

909

 
 

195508

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2-2023-2281 --- poppler

ID: oval:org.secpod.oval:def:1701815Date: (C)2023-10-26   (M)2024-01-03
Class: PATCHFamily: unix




An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service via crafted .pdf file to FoFiType1C::cvtGlyph function. An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service via crafted .pdf file to FoFiType1C::convertToType1 function. An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to denial of service because PDFDoc::replacePageDict in PDFDoc.cc lacks a stream check before saving an embedded file

Platform:
Amazon Linux 2
Product:
poppler
Reference:
ALAS2-2023-2281
CVE-2020-36023
CVE-2020-36024
CVE-2022-38349
CVE    3
CVE-2020-36024
CVE-2022-38349
CVE-2020-36023
CPE    2
cpe:/o:amazon:linux:2
cpe:/a:freedesktop:poppler

© SecPod Technologies