First published: Sun Jun 25 2017(Updated: )
Last updated 24 July 2024
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
freedesktop poppler | =0.54.0 | |
Debian Debian Linux | =8.0 | |
Debian Debian Linux | =9.0 | |
debian/poppler | 20.09.0-3.1+deb11u1 22.12.0-2 24.08.0-4 | |
Debian | =8.0 | |
Debian | =9.0 |
https://cgit.freedesktop.org/poppler/poppler/commit/?id=75fff6556eaf0ef3a6fcdef2c2229d0b6d1c58d9
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2017-9865 is medium.
CVE-2017-9865 affects Poppler version 0.54.0.
Remote attackers can exploit CVE-2017-9865 by sending a crafted PDF document to the affected system.
Yes, a fix is available for CVE-2017-9865. It is recommended to upgrade to version 0.71.0-5 or higher.
More information about CVE-2017-9865 can be found at the following references: [Link 1](http://somevulnsofadlab.blogspot.com/2017/06/popplerstack-buffer-overflow-in.html), [Link 2](https://bugs.freedesktop.org/show_bug.cgi?id=100774), [Link 3](https://www.debian.org/security/2018/dsa-4079).