REDHAT-BUG-595245: High severity Freedesktop poppler vulnerability

Published May 24, 2010

Updated

Sauli Pahlman of CERT-FI provided us with fuzzed PDF file which causes xpdf / poppler PDF parser to crash.

The crash is caused by an attempt to dereference uninitialized Gfx::parser pointer in Gfx::getPos(), which assumes parser is either NULL or valid Parser pointer.

http://cgit.freedesktop.org/poppler/poppler/tree/poppler/Gfx.cc?id=71063d51#n879

Affected Software

2 affected components

Freedesktop poppler

xpdf Xpdf

Event History

May 24, 2010

Data Sourced

07:59 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-595245?

The severity of REDHAT-BUG-595245 is categorized as a crash vulnerability in the PDF parser.

How do I fix REDHAT-BUG-595245?

To fix REDHAT-BUG-595245, update to the latest version of Freedesktop Poppler or Xpdf that addresses this vulnerability.

Which software is affected by REDHAT-BUG-595245?

REDHAT-BUG-595245 affects Freedesktop Poppler and Xpdf software.

What causes the crash in REDHAT-BUG-595245?

The crash in REDHAT-BUG-595245 is caused by dereferencing an uninitialized parser pointer in the PDF parser.

Is there a workaround for REDHAT-BUG-595245?

Currently, there is no specified workaround for REDHAT-BUG-595245 beyond applying the relevant software updates.