Poppler prima di 0.70.0 ha un NULL pointer dereference in _poppler_attachment_new quando chiamato da poppler_annot_file_attachment_get_attachment. |
http://www.securityfocus.com/bid/106031 https://security.gentoo.org/glsa/201904-04 https://gitlab.freedesktop.org/poppler/poppler/issues/664 https://access.redhat.com/errata/RHSA-2019:2022 https://usn.ubuntu.com/3837-1/ https://usn.ubuntu.com/3837-2/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19149 |
Vulnerabilità: CVE-2018-19149
