Asymmetric denial of service In poppler
Description
The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a denial of service (infinite recursion) via a crafted PDF file, as demonstrated by pdftops.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 14 | 0.69.0-2 | ||
debian 13 | 0.69.0-2 | ||
debian 11 | 0.69.0-2 | ||
 rpm rhel7 | 0:1.6.1-1.el7 | ||
rpm rhel7 | 0:3.28.2-1.el7 | ||
rpm rhel7 | 1:0.11.4-1.el7 | ||
rpm rhel7 | 0:3.28.0-1.el7 | ||
rpm rhel7 | 0:3.12.13-1.el7 | ||
rpm rhel7 | 0:2.36.12-3.el7 | ||
debian 12 | 0.69.0-2 |
1-10 of 152
10
Aliases
1. 2. 3. 4. 5.