Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-2814
HistoryJul 12, 2017 - 5:29 p.m.

Heap overflow

2017-07-1217:29:00
PRIOn knowledge base
www.prio-n.com
6

9 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.2%

An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted pdf can cause an image resizing after allocation has already occurred, resulting in heap corruption which can lead to code execution. An attacker controlled PDF file can be used to trigger this vulnerability.

CPENameOperatorVersion
popplereq0.53.0

9 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.2%