Security Advisory

CVE-2008-2950

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-07-07 23:00:00
Last updated 2024-08-07 09:21:34
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document.