CVE-2017-18267

poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service

Published May 10, 2018 CVSS 3.0 · 5.5 Medium EPSS 1.8% KEV · Not listed
Description
The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a denial of service (infinite recursion) via a crafted PDF file, as demonstrated by pdftops.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-1562-1 poppler security update
Debian DLA Debian DLA DLA-2287-1 poppler security update
EUVD EUVD EUVD-2017-9394 The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a denial of service (infinite recursion) via a crafted PDF file, as demonstrated by pdftops.
Ubuntu USN Ubuntu USN USN-3647-1 poppler vulnerabilities
History

No history.