CVE-2017-7511: Null Pointer Dereference
Published May 30, 2017
·Updated
poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents.
Affected Software
79 affected components
Freedesktop poppler=0.17.3
Freedesktop poppler=0.17.4
Freedesktop poppler=0.18.0
Freedesktop poppler=0.18.1
Freedesktop poppler=0.18.2
Freedesktop poppler=0.18.3
Freedesktop poppler=0.18.4
Freedesktop poppler=0.19.0
Freedesktop poppler=0.19.1
Freedesktop poppler=0.19.2
Freedesktop poppler=0.19.3
Freedesktop poppler=0.19.4
Freedesktop poppler=0.20.0
Freedesktop poppler=0.20.1
Freedesktop poppler=0.20.2
Freedesktop poppler=0.20.3
Freedesktop poppler=0.20.4
Freedesktop poppler=0.20.5
Freedesktop poppler=0.21.0
Freedesktop poppler=0.21.1
Freedesktop poppler=0.21.2
Freedesktop poppler=0.21.3
Freedesktop poppler=0.21.4
Freedesktop poppler=0.22.0
Freedesktop poppler=0.22.1
Freedesktop poppler=0.22.2
Freedesktop poppler=0.22.3
Freedesktop poppler=0.22.4
Freedesktop poppler=0.22.5
Freedesktop poppler=0.23.0
Freedesktop poppler=0.23.1
Freedesktop poppler=0.23.2
Freedesktop poppler=0.23.3
Freedesktop poppler=0.23.4
Freedesktop poppler=0.24.0
Freedesktop poppler=0.24.1
Freedesktop poppler=0.24.2
Freedesktop poppler=0.24.3
Freedesktop poppler=0.24.4
Freedesktop poppler=0.24.5
Freedesktop poppler=0.25.0
Freedesktop poppler=0.25.1
Freedesktop poppler=0.25.2
Freedesktop poppler=0.25.3
Freedesktop poppler=0.26.0
Freedesktop poppler=0.26.1
Freedesktop poppler=0.26.2
Freedesktop poppler=0.26.3
Freedesktop poppler=0.26.4
Freedesktop poppler=0.26.5
Freedesktop poppler=0.28.0
Freedesktop poppler=0.28.1
Freedesktop poppler=0.29.0
Freedesktop poppler=0.30.0
Freedesktop poppler=0.31.0
Freedesktop poppler=0.32.0
Freedesktop poppler=0.33.0
Freedesktop poppler=0.34.0
Freedesktop poppler=0.35.0
Freedesktop poppler=0.36.0
Freedesktop poppler=0.37.0
Freedesktop poppler=0.38.0
Freedesktop poppler=0.39.0
Freedesktop poppler=0.40.0
Freedesktop poppler=0.41.0
Freedesktop poppler=0.42.0
Freedesktop poppler=0.43.0
Freedesktop poppler=0.44.0
Freedesktop poppler=0.45.0
Freedesktop poppler=0.46.0
Freedesktop poppler=0.47.0
Freedesktop poppler=0.48.0
Freedesktop poppler=0.49.0
Freedesktop poppler=0.50.0
Freedesktop poppler=0.51.0
Freedesktop poppler=0.52.0
Freedesktop poppler=0.53.0
Freedesktop poppler=0.54.0
Freedesktop poppler=0.55.0
Remediation
Event History
May 30, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-7511?
CVE-2017-7511 has been rated as a high severity vulnerability due to the potential for a NULL pointer dereference which may lead to application crashes.
2
How do I fix CVE-2017-7511?
To fix CVE-2017-7511, upgrade to a version of Poppler that is later than 0.54.0 where this vulnerability has been resolved.
3
Which versions of Poppler are affected by CVE-2017-7511?
CVE-2017-7511 affects Poppler versions from 0.17.3 to 0.54.0.
4
What type of vulnerability is CVE-2017-7511?
CVE-2017-7511 is a vulnerability that results in a NULL pointer dereference in the pdfunite component of Poppler.
5
What could happen if I don't address CVE-2017-7511?
If CVE-2017-7511 is not addressed, attackers could craft malicious PDF documents that may crash the application or potentially exploit further vulnerabilities.