CVE-2020-27778: Buffer Overflow
A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' program, would crash the application causing a denial of service.
Other sources
In poppler-v0.75.0 in pdftohtml there is a buffer overflow.
Upstream issue: https://gitlab.freedesktop.org/poppler/poppler/-/issues/742
Upstream fix: https://gitlab.freedesktop.org/poppler/poppler/-/commit/30c731b487190c02afff3f036736a392eb60cd9a
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-27778?
CVE-2020-27778 is a vulnerability in Poppler that allows a remote attacker to crash the application and cause a denial of service.
How does CVE-2020-27778 work?
CVE-2020-27778 works by providing a malicious PDF file that, when processed by the 'pdftohtml' program, crashes the application.
What is the severity of CVE-2020-27778?
The severity of CVE-2020-27778 is high, with a CVSS score of 7.5.
Which software is affected by CVE-2020-27778?
Poppler version up to 0.76.0, Red Hat Enterprise Linux 8.0, and Debian Debian Linux 10.0 are affected by CVE-2020-27778.
How can I fix CVE-2020-27778?
To fix CVE-2020-27778, update Poppler to version 0.76.0 or apply the necessary patches provided by the software vendor.