The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table pointer, which allows an attacker to launch a denial of service attack.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-10-01T23:00:00
Updated: 2024-08-05T19:42:22.341Z
Reserved: 2017-10-01T00:00:00
Link: CVE-2017-14977
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-10-02T01:29:00.657
Modified: 2024-11-21T03:13:53.150
Link: CVE-2017-14977
Redhat