Poppler CVE-2019-9543 Denial of Service Vulnerability

Bugtraq ID:	107238
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2019-9543
Remote:	Yes
Local:	No
Published:	Mar 01 2019 12:00AM
Updated:	Mar 01 2019 12:00AM
Credit:	ACE Team �?? Loginsoft
Vulnerable:	Poppler poppler 0.74.0
Not Vulnerable:

Poppler CVE-2019-9543 Denial of Service Vulnerability

Poppler is prone to a denial-of-service vulnerability.

A remote attacker may exploit this issue to cause a denial-of-service condition; denying service to legitimate users.

Poppler 0.74.0 is vulnerable; other versions may also be affected.

Poppler CVE-2019-9543 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Poppler CVE-2019-9543 Denial of Service Vulnerability

References:

• Poppler Homepage (Poppler)
  
• recursive function call in function JBIG2Stream::readGenericBitmap() (FreeDesktop)
  
• Recursive function call in function JBIG2Stream::readGenericBitmap() (Loginsoft)