REDHAT-BUG-1665266: Null Pointer Dereference

Published Jan 10, 2019

Updated

A flaw was found in Poppler 0.72.0. A NULL pointer dereference in the XRef::getEntry class in XRef.cc file due to the mishandle of unallocated XRef entries. This allows remote attackers to cause a denial of service via a crafted PDF document, when XRefEntry::setFlag in XRef.h is called from Parser::makeStream in Parser.cc.

References: https://gitlab.freedesktop.org/poppler/poppler/issues/692

Upstream Patch: https://gitlab.freedesktop.org/poppler/poppler/mergerequests/143

Affected Software

1 affected component

Poppler Poppler=0.72.0

Event History

Jan 10, 2019

Data Sourced

via Red Hat·08:14 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1665266?

The severity of REDHAT-BUG-1665266 is considered to be high due to the potential denial of service caused by malformed PDF documents.

How do I fix REDHAT-BUG-1665266?

To fix REDHAT-BUG-1665266, upgrade Poppler to a patched version that resolves the NULL pointer dereference issue.

What software is affected by REDHAT-BUG-1665266?

The affected software for REDHAT-BUG-1665266 is Poppler version 0.72.0.

Can REDHAT-BUG-1665266 be exploited remotely?

Yes, REDHAT-BUG-1665266 can be exploited remotely through crafted PDF documents.

What is the impact of the vulnerability REDHAT-BUG-1665266?

The impact of REDHAT-BUG-1665266 is a denial of service, leading to potential application crashes when processing malicious PDF files.