Lucene search
PRIOn knowledge basePRION:CVE-2019-7310HistoryFeb 03, 2019 - 3:29 a.m.
Heap overflow
2019-02-0303:29:00
PRIOn knowledge base
www.prio-n.com
6
In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document, as demonstrated by pdftocairo.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 16.04 | |
| ubuntu_linux | eq | 14.04 | |
| ubuntu_linux | eq | 18.04 | |
| ubuntu_linux | eq | 18.10 | |
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 9.0 | |
| fedora | eq | 28 | |
| poppler | eq | 0.73.0 | |
| enterprise_linux | eq | 8.0 | |
| enterprise_linux_desktop | eq | 7.0 |
References
www.securityfocus.com/bid/106829
access.redhat.com/errata/RHSA-2019:2022
access.redhat.com/errata/RHSA-2019:2713
bugs.chromium.org/p/oss-fuzz/issues/detail?id=12797
gitlab.freedesktop.org/poppler/poppler/issues/717
lists.debian.org/debian-lts-announce/2019/03/msg00008.html
lists.debian.org/debian-lts-announce/2020/11/msg00014.html
lists.fedoraproject.org/archives/list/[email protected]/message/BI7NLDN2HUEU4ZW3D7XPHOAEGT2CKDRO/
usn.ubuntu.com/3886-1/
Related
nessus
nessus
EulerOS 2.0 SP5 : poppler (EulerOS-SA-2019-1071)
2019-03-08 00:00:00
EulerOS 2.0 SP3 : poppler (EulerOS-SA-2019-1102)
2019-03-26 00:00:00
openSUSE 15 Security Update : poppler (SUSE-SU-2023:3241-1)
2023-08-09 00:00:00
veracode
veracode
Denial Of Service
2019-02-04 04:43:31
redhatcve
redhatcve
CVE-2019-7310
2019-10-08 23:16:33
ubuntucve
ubuntucve
CVE-2019-7310
2019-02-02 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for poppler (EulerOS-SA-2019-1071)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for poppler (EulerOS-SA-2019-1102)
2020-01-23 00:00:00
Ubuntu: Security Advisory (USN-3886-1)
2019-02-12 00:00:00
debiancve
debiancve
CVE-2019-7310
2019-02-03 03:29:00
nvd
nvd
CVE-2019-7310
2019-02-03 03:29:00
cvelist
cvelist
CVE-2019-7310
2019-02-03 03:00:00
osv
osv
CVE-2019-7310
2019-02-03 03:29:00
poppler - security update
2019-03-08 00:00:00
poppler - security update
2020-11-08 00:00:00
cve
cve
CVE-2019-7310
2019-02-03 03:29:00
ubuntu
ubuntu
poppler vulnerabilities
2019-02-11 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: poppler-0.67.0-12.fc29
2019-02-25 02:42:51
[SECURITY] Fedora 28 Update: poppler-0.62.0-16.fc28
2019-04-01 01:21:55
[SECURITY] Fedora 29 Update: mingw-poppler-0.67.0-4.fc29
2019-03-15 18:30:03
mageia
mageia
Updated poppler packages fix security vulnerability
2019-02-20 23:56:50
debian
debian
[SECURITY] [DLA 1706-1] poppler security update
2019-03-08 20:37:16
[SECURITY] [DLA 2440-1] poppler security update
2020-11-08 23:59:37
kitploit
kitploit
amazon
amazon
Medium: poppler
2019-08-23 17:01:00
Medium: poppler
2019-10-21 18:01:00
oraclelinux
oraclelinux
poppler security update
2019-09-12 00:00:00
poppler security, bug fix, and enhancement update
2019-08-13 00:00:00
redhat
redhat
(RHSA-2019:2713) Moderate: poppler security update
2019-09-10 15:32:22
(RHSA-2019:2022) Moderate: poppler security, bug fix, and enhancement update
2019-08-06 07:51:02
centos
centos
evince, okular, poppler security update
2019-08-30 02:44:38
suse
suse
Security update for poppler (important)
2021-12-01 00:00:00