Heap-Based Buffer Underwrite in Poppler Affects Image Processing
CVE-2019-9200
8.8HIGH
What is CVE-2019-9200?
A heap-based buffer underwrite vulnerability exists in the ImageStream::getLine() function of Poppler version 0.74.0. This security flaw can be triggered by an attacker through the exploitation of crafted PDF files directed at the pdfimages binary. Successful exploitation may result in Denial of Service, leading to a segmentation fault, and could potentially allow further unspecified impacts, posing a risk to the integrity and availability of the system.
References
EPSS Score
5% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved