CVE-2017-14929

Published: Sep 30, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In Poppler 0.59.0, memory corruption occurs in a call to Object::dictLookup() in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opFill, Gfx::doPatternFill, Gfx::doTilingPatternFill and Gfx::drawForm calls (aka a Gfx.cc infinite loop), a different vulnerability than CVE-2017-14519.

Affected (1)

Products: Freedesktop: Poppler

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Freedesktop Poppler	Version 0.59.0

Related CWEs

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (4)

https://bugs.freedesktop.org/show_bug.cgi?id=102969

Source: cve@mitre.org

Issue TrackingVendor Advisory

https://www.debian.org/security/2018/dsa-4097

Source: cve@mitre.org

https://bugs.freedesktop.org/show_bug.cgi?id=102969

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

https://www.debian.org/security/2018/dsa-4097

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.