CVE-2019-9545

HIGH8.8

An issue was discovered in Poppler 0

Published Mar 1, 2019

Modified 1 years ago

Details

An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero.

References

WEB

https://gitlab.freedesktop.org/poppler/poppler/issues/731

WEB

https://research.loginsoft.com/bugs/recursive-function-call-in-function-jbig2streamreadtextregion-poppler-0-74-0/

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2019-9545

CVSS Analysis

CVSS v3.0

8.8

Exploitability

Attack Vector