There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2018-05-06T23:00:00

Updated: 2024-08-05T07:46:47.416Z

Reserved: 2018-05-06T00:00:00

Link: CVE-2018-10768

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2018-05-06T23:29:00.300

Modified: 2019-04-25T18:38:22.877

Link: CVE-2018-10768

cve-icon Redhat

Severity : Low

Publid Date: 2018-05-05T00:00:00Z

Links: CVE-2018-10768 - Bugzilla