Poppler CVE-2018-20481 Denial of Service Vulnerability

Bugtraq ID:	106321
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2018-20481
Remote:	Yes
Local:	No
Published:	Dec 25 2018 12:00AM
Updated:	Dec 25 2018 12:00AM
Credit:	skysider
Vulnerable:	freedesktop Poppler 0.72
Not Vulnerable:

Poppler CVE-2018-20481 Denial of Service Vulnerability

Poppler is prone to a denial-of-service vulnerability.

A remote attacker may exploit this issue to cause a denial-of-service condition; denying service to legitimate users.

Poppler 0.72.0 is vulnerable; other versions may also be affected.

Poppler CVE-2018-20481 Denial of Service Vulnerability

References:

• Do not try to parse into unallocated XRef entry and return pointer to dummy entr (FreeDesktop)
  
• null pointer dereference in XRef::getEntry (FreeDesktop)
  
• Poppler Homepage (Poppler)