CVE-2017-9083: Null Pointer Dereference
poppler 0.54.0, as used in Evince and other products, has a NULL pointer dereference in the JPXStream::readUByte function in JPXStream.cc. For example, the perftest utility will crash (segmentation fault) when parsing an invalid PDF file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9083?
CVE-2017-9083 is considered to have a high severity due to its potential to cause a segmentation fault in vulnerable applications.
How do I fix CVE-2017-9083?
To fix CVE-2017-9083, update Poppler to a version later than 0.54.0 that has addressed this vulnerability.
Which versions of Poppler are affected by CVE-2017-9083?
CVE-2017-9083 specifically affects Poppler version 0.54.0.
What types of applications are impacted by CVE-2017-9083?
Applications such as Evince and utilities like perf_test are impacted by CVE-2017-9083 due to their use of the vulnerable Poppler library.
What is the nature of the vulnerability in CVE-2017-9083?
CVE-2017-9083 is a NULL pointer dereference vulnerability in the JPXStream::readUByte function, leading to application crashes when invalid PDF files are processed.