Description
The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a denial of service (infinite recursion) via a crafted PDF file, as demonstrated by pdftops.
Published: 2018-05-10
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-1562-1 poppler security update
Debian DLA Debian DLA DLA-2287-1 poppler security update
EUVD EUVD EUVD-2017-9394 The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a denial of service (infinite recursion) via a crafted PDF file, as demonstrated by pdftops.
Ubuntu USN Ubuntu USN USN-3647-1 poppler vulnerabilities
History

No history.

Subscriptions

Canonical Ubuntu Linux
Debian Debian Linux
Freedesktop Poppler
Redhat Ansible Tower Enterprise Linux Enterprise Linux Desktop Enterprise Linux Server Enterprise Linux Workstation
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-05T21:13:49.201Z

Reserved: 2018-05-10T00:00:00.000Z

Link: CVE-2017-18267

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-05-10T15:29:00.220

Modified: 2024-11-21T03:19:43.640

Link: CVE-2017-18267

cve-icon Redhat

Severity : Low

Publid Date: 2017-10-12T00:00:00Z

Links: CVE-2017-18267 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses