CVE-2017-14617

Published: Sep 20, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files.

Affected (1)

Products: Freedesktop: Poppler

Freedesktop

1 product

Poppler

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Freedesktop Poppler	Version 0.59.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://bugs.freedesktop.org/show_bug.cgi?id=102854

Source: cve@mitre.org

Third Party Advisory

https://bugs.freedesktop.org/show_bug.cgi?id=102854

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.