Wind River Support Network

HomeDefectsLIN9-6173

Fixed

LIN9-6173 : Security Advisory - poppler - CVE-2017-1000456

Created: Jan 15, 2018 Updated: Dec 24, 2018

Resolved Date: Jan 28, 2018

Found In Version: 9.0.0.13

Fix Version: 9.0.0.14

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations.

https://nvd.nist.gov/vuln/detail/CVE-2017-1000456

Other Downloads

CVEs

CVE-2017-1000456