Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2017-9776 →

DEBIAN-CVE-2017-9776

Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of s...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 poppler

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.57.0-2"}]}]

Debian:13 poppler

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.57.0-2"}]}]

Debian:14 poppler

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.57.0-2"}]}]

Références

advisory security-tracker.debian.org