CVE-2017-1000456 PUBLISHED

freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations.

EPSS 0.72% · 72.3th percentile

Risk Scores

EPSS Score
0.72%
72.3th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSpoppler0, 0.24.1-0ubuntu1, 0.24.3-0ubuntu1
Ubuntu:16.04:LTSpoppler0, 0.33.0-0ubuntu3, 0.37.0-0ubuntu1

Timeline

References

Open in Interactive Console →