CVE-2018-19059: Medium severity Freedesktop poppler vulnerability
An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in FileSpec.cc, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating embedded files before save attempts.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-19059?
CVE-2018-19059 is an issue discovered in Poppler 0.71.0 that results in an out-of-bounds read in EmbFile::save2 in FileSpec.cc, leading to denial of service.
How can CVE-2018-19059 impact me?
CVE-2018-19059 can impact you by causing a denial of service if an attacker exploits the out-of-bounds read vulnerability in Poppler 0.71.0.
What is the severity of CVE-2018-19059?
CVE-2018-19059 has a severity rating of 6.5, which is considered medium.
How can I fix CVE-2018-19059?
To fix CVE-2018-19059, update Poppler to version 0.71.0-5 or later.
Where can I find more information about CVE-2018-19059?
You can find more information about CVE-2018-19059 on the CVE website, the Ubuntu security notices, and the NIST vulnerability database.