CVE-2017-9775: Buffer Overflow
Poppler has a stack-based buffer overflow in GfxState.cc, which allows attackers to cause a denial of service (application crash) via a crafted PDF document.
Upstream issue:
https://bugs.freedesktop.org/showbug.cgi?id=101540
Upstream patch:
https://cgit.freedesktop.org/poppler/poppler/commit/?id=8f4ff8243a3d599ff2a6c08b1da389e606ba4fc9
Other sources
Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9775?
CVE-2017-9775 has been classified as a high severity vulnerability due to the potential for denial of service by triggering an application crash.
How do I fix CVE-2017-9775?
To mitigate CVE-2017-9775, users should upgrade to a non-vulnerable version of the Poppler package.
Which software versions are affected by CVE-2017-9775?
CVE-2017-9775 affects Poppler versions up to 0.55.0 and specific packages of Debian and Red Hat Enterprise Linux.
What type of attack is possible with CVE-2017-9775?
CVE-2017-9775 allows attackers to launch denial of service attacks through specially crafted PDF documents.
Is CVE-2017-9775 still a threat in current systems?
CVE-2017-9775 poses a threat to systems that have not been updated or mitigated against this specific vulnerability.