CVE-2017-9083 PUBLISHED

poppler 0.54.0, as used in Evince and other products, has a NULL pointer dereference in the JPXStream::readUByte function in JPXStream.cc. For example, the perf_test utility will crash (segmentation fault) when parsing an invalid PDF file.

EPSS 0.68% · 71.3th percentile

Risk Scores

EPSS Score
0.68%
71.3th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSpoppler0, 0.24.1-0ubuntu1, 0.24.3-0ubuntu1
Ubuntu:16.04:LTSpoppler0, 0.33.0-0ubuntu3, 0.37.0-0ubuntu1

Timeline

References

Open in Interactive Console →