Poppler 'JBIG2Stream::readSegments()' Method Denial of Service Vulnerability

Bugtraq ID:	64636
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-7296
Remote:	Yes
Local:	No
Published:	Dec 07 2013 12:00AM
Updated:	Apr 13 2015 09:55PM
Credit:	xiao
Vulnerable:	S.u.S.E. openSUSE 13.1 S.u.S.E. openSUSE 12.3 S.u.S.E. openSUSE 11.4 Poppler poppler 0 Gentoo Linux
Not Vulnerable:

Poppler 'JBIG2Stream::readSegments()' Method Denial of Service Vulnerability

Poppler is prone to remote denial-of-service vulnerabilitiy when handling malformed PDF files.

Successfully exploiting this issue allow remote attackers to crash applications that use the vulnerable library, denying service to legitimate users.

Poppler 'JBIG2Stream::readSegments()' Method Denial of Service Vulnerability

To exploit this issue an attacker must entice an unsuspecting user to open a malicious PDF file.

Report indicates that proof-of-concept is available. Please see the references for more information.

Poppler 'JBIG2Stream::readSegments()' Method Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Poppler 'JBIG2Stream::readSegments()' Method Denial of Service Vulnerability

References:

• Poppler Homepage (Poppler)