Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF document.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2016-05-06T17:00:00

Updated: 2024-08-06T08:29:22.157Z

Reserved: 2016-04-23T00:00:00

Link: CVE-2015-8868

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2016-05-06T17:59:04.630

Modified: 2018-01-05T02:30:23.103

Link: CVE-2015-8868

cve-icon Redhat

Severity : Moderate

Publid Date: 2016-04-11T00:00:00Z

Links: CVE-2015-8868 - Bugzilla