CVE-2017-14928: Null Pointer Dereference
Published Sep 29, 2017
·Updated
In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Configuration::Configuration in Annot.cc via a crafted PDF document.
Affected Software
2 affected components
Freedesktop poppler=0.59.0
Debian Debian Linux=9.0
Event History
Sep 29, 2017
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-14928?
CVE-2017-14928 is classified as a high severity vulnerability due to the potential for denial of service attacks.
2
How do I fix CVE-2017-14928?
To fix CVE-2017-14928, you should update Poppler to a version that is patched against this vulnerability.
3
What is the impact of CVE-2017-14928?
The impact of CVE-2017-14928 is that it can lead to a NULL pointer dereference, causing applications to crash when processing specially crafted PDF documents.
4
Which software is affected by CVE-2017-14928?
CVE-2017-14928 affects Poppler version 0.59.0 and Debian version 9.0.
5
Can CVE-2017-14928 be exploited remotely?
Yes, CVE-2017-14928 can potentially be exploited remotely if a user opens a malicious PDF document.