| Max CVSS | 4.3 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-19058 | 4.3 |
An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before saving an embedded file.
|
11-02-2023 - 18:05 | 07-11-2018 - 16:29 | |
| CVE-2018-16646 | 4.3 |
In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack.
|
23-07-2020 - 12:15 | 06-09-2018 - 23:29 | |
| CVE-2018-19149 | 4.3 |
Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment.
|
06-08-2019 - 17:15 | 10-11-2018 - 19:29 | |
| CVE-2018-19059 | 4.3 |
An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in FileSpec.cc, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating embedded files before save attempts.
|
06-08-2019 - 17:15 | 07-11-2018 - 16:29 | |
| CVE-2018-19060 | 4.3 |
An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating a filename of an embedded file before constructing a save path.
|
06-08-2019 - 17:15 | 07-11-2018 - 16:29 |