CVE-2015-8868: Buffer Overflow
Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF document.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8868?
CVE-2015-8868 has a severity rating that indicates it can lead to memory corruption and potential arbitrary code execution.
How do I fix CVE-2015-8868?
To remediate CVE-2015-8868, you should update Poppler to version 0.40.0 or later.
What systems are affected by CVE-2015-8868?
CVE-2015-8868 affects various versions of Fedora, Debian, and Ubuntu that use vulnerable Poppler versions.
What types of attacks can CVE-2015-8868 facilitate?
CVE-2015-8868 can facilitate denial of service attacks or allow remote code execution through crafted PDF files.
Is CVE-2015-8868 being actively exploited?
While proof-of-concept exploits may exist, the active exploitation status of CVE-2015-8868 should be monitored through security advisories.