Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2019-7310
Description:In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document, as demonstrated by pdftocairo.
Test IDs: 1.3.6.1.4.1.25623.1.0.843905   1.3.6.1.4.1.25623.1.0.875511   1.3.6.1.4.1.25623.1.0.891706   1.3.6.1.4.1.25623.1.0.875740   1.3.6.1.4.1.25623.1.0.875533   1.3.6.1.4.1.25623.1.0.876166   1.3.6.1.4.1.25623.1.1.2.2019.1102   1.3.6.1.4.1.25623.1.1.2.2019.1054   1.3.6.1.4.1.25623.1.1.2.2019.1071   1.3.6.1.4.1.25623.1.1.2.2020.1875   1.3.6.1.4.1.25623.1.1.2.2021.1252   1.3.6.1.4.1.25623.1.1.2.2021.1271  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2019-7310
BugTraq ID: 106829
http://www.securityfocus.com/bid/106829
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BI7NLDN2HUEU4ZW3D7XPHOAEGT2CKDRO/
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12797
https://gitlab.freedesktop.org/poppler/poppler/issues/717
https://lists.debian.org/debian-lts-announce/2019/03/msg00008.html
https://lists.debian.org/debian-lts-announce/2020/11/msg00014.html
RedHat Security Advisories: RHSA-2019:2022
https://access.redhat.com/errata/RHSA-2019:2022
RedHat Security Advisories: RHSA-2019:2713
https://access.redhat.com/errata/RHSA-2019:2713
https://usn.ubuntu.com/3886-1/




© 1998-2021 E-Soft Inc. All rights reserved.