Denial of Service Vulnerability in Poppler PDF Rendering Library
CVE-2009-0756

Currently unrated

Key Information:

Vendor

Poppler

Status
Poppler
Vendor
CVE Published:
3 March 2009

What is CVE-2009-0756?

The JBIG2Stream::readSymbolDictSeg function in Poppler versions earlier than 0.10.4 is susceptible to a denial of service attack. By crafting a malicious PDF file that leads to a parsing error, remote attackers can exploit an improper handling of memory, resulting in a crash due to an invalid memory dereference. This vulnerability poses a significant risk, especially in environments relying on PDF processing.

References

http://www.securityfocus.com/bid/33749
vdb-entryx_refsource_BID
http://secunia.com/advisories/33853
third-party-advisoryx_refsource_SECUNIA
http://www.openwall.com/lists/oss-security/2009/02/19/2
mailing-listx_refsource_MLIST

EPSS Score

10% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.