CVE-2018-19060

An issue was discovered in Poppler 0.71.0

published November 7, 2018

CVSS
—
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating a filename of an embedded file before constructing a save path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01735 · 77.5th percentile
Published
2018-11-07T16:00Z
EPSS history
Timeline
  • 07 NOV 16:00Z
    An issue was discovered in Poppler 0.71.0
    cvelistv5