Poppler 'DCTStream.cc' File Denial of Service Vulnerability
BID:63001
Info
Poppler 'DCTStream.cc' File Denial of Service Vulnerability
| Bugtraq ID: | 63001 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 24 2010 12:00AM |
| Updated: | Apr 24 2010 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
SuSE SUSE Linux Enterprise 11 Poppler poppler 0.12 Poppler poppler 0.10.6 Poppler poppler 0.10.4 Poppler poppler 0.10.3 Poppler poppler 0.8.4 Poppler poppler 0.8 Poppler poppler 0.5.4 Poppler poppler 0.5.3 Poppler poppler 0.5.1 Poppler poppler 0.4.5 Poppler poppler 0.4.2 Poppler poppler 0.4.1 Poppler poppler 0.3.2 |
| Not Vulnerable: | |
Discussion
Poppler 'DCTStream.cc' File Denial of Service Vulnerability
Poppler is prone to a denial-of-service vulnerability.
Successfully exploiting this issue allows remote attackers to crash applications that use the vulnerable library, denying service to legitimate users.
Poppler is prone to a denial-of-service vulnerability.
Successfully exploiting this issue allows remote attackers to crash applications that use the vulnerable library, denying service to legitimate users.
Exploit / POC
Poppler 'DCTStream.cc' File Denial of Service Vulnerability
To exploit this issue, an attacker must entice an unsuspecting user to open a malicious PDF file.
To exploit this issue, an attacker must entice an unsuspecting user to open a malicious PDF file.
Solution / Fix
Poppler 'DCTStream.cc' File Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.