CVE-2018-20662

In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong…

published January 3, 2019

CVSS
—
EPSS
2%
Percentile
82.9
In the wild
Unconfirmed
What it is

In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02262 · 82.9th percentile
Published
2019-01-03T13:00Z
EPSS history
Timeline
  • 03 JAN 13:00Z
    In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong…
    cvelistv5