This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2017-9776 →

DEBIAN-CVE-2017-9776

Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of s...

Original description

The description as published by the source.

Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 poppler

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.57.0-2"}]}]

Debian:13 poppler

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.57.0-2"}]}]

Debian:14 poppler

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.57.0-2"}]}]

References

advisory security-tracker.debian.org