Security Advisory

CVE-2018-20662

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-01-03 13:00:00
Last updated 2024-08-05 12:05:17
Assigner mitre
State PUBLISHED

Description

In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.