CVE-2017-7511

Published: May 30, 2017Modified: May 13, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents.

Affected (79)

Products: Freedesktop: Poppler

Freedesktop

1 product

Poppler

Configuration A

79 vulnerable

Vulnerable Software	Affected Versions
Freedesktop Poppler	Version 0.17.3
Freedesktop Poppler	Version 0.17.4
Freedesktop Poppler	Version 0.18.0
Freedesktop Poppler	Version 0.18.1
Freedesktop Poppler	Version 0.18.2
Freedesktop Poppler	Version 0.18.3
Freedesktop Poppler	Version 0.18.4
Freedesktop Poppler	Version 0.19.0
Freedesktop Poppler	Version 0.19.1
Freedesktop Poppler	Version 0.19.2
Freedesktop Poppler	Version 0.19.3
Freedesktop Poppler	Version 0.19.4
Freedesktop Poppler	Version 0.20.0
Freedesktop Poppler	Version 0.20.1
Freedesktop Poppler	Version 0.20.2
Freedesktop Poppler	Version 0.20.3
Freedesktop Poppler	Version 0.20.4
Freedesktop Poppler	Version 0.20.5
Freedesktop Poppler	Version 0.21.0
Freedesktop Poppler	Version 0.21.1
Freedesktop Poppler	Version 0.21.2
Freedesktop Poppler	Version 0.21.3
Freedesktop Poppler	Version 0.21.4
Freedesktop Poppler	Version 0.22.0
Freedesktop Poppler	Version 0.22.1
Freedesktop Poppler	Version 0.22.2
Freedesktop Poppler	Version 0.22.3
Freedesktop Poppler	Version 0.22.4
Freedesktop Poppler	Version 0.22.5
Freedesktop Poppler	Version 0.23.0
Freedesktop Poppler	Version 0.23.1
Freedesktop Poppler	Version 0.23.2
Freedesktop Poppler	Version 0.23.3
Freedesktop Poppler	Version 0.23.4
Freedesktop Poppler	Version 0.24.0
Freedesktop Poppler	Version 0.24.1
Freedesktop Poppler	Version 0.24.2
Freedesktop Poppler	Version 0.24.3
Freedesktop Poppler	Version 0.24.4
Freedesktop Poppler	Version 0.24.5
Freedesktop Poppler	Version 0.25.0
Freedesktop Poppler	Version 0.25.1
Freedesktop Poppler	Version 0.25.2
Freedesktop Poppler	Version 0.25.3
Freedesktop Poppler	Version 0.26.0
Freedesktop Poppler	Version 0.26.1
Freedesktop Poppler	Version 0.26.2
Freedesktop Poppler	Version 0.26.3
Freedesktop Poppler	Version 0.26.4
Freedesktop Poppler	Version 0.26.5
Freedesktop Poppler	Version 0.28.0
Freedesktop Poppler	Version 0.28.1
Freedesktop Poppler	Version 0.29.0
Freedesktop Poppler	Version 0.30.0
Freedesktop Poppler	Version 0.31.0
Freedesktop Poppler	Version 0.32.0
Freedesktop Poppler	Version 0.33.0
Freedesktop Poppler	Version 0.34.0
Freedesktop Poppler	Version 0.35.0
Freedesktop Poppler	Version 0.36.0
Freedesktop Poppler	Version 0.37.0
Freedesktop Poppler	Version 0.38.0
Freedesktop Poppler	Version 0.39.0
Freedesktop Poppler	Version 0.40.0
Freedesktop Poppler	Version 0.41.0
Freedesktop Poppler	Version 0.42.0
Freedesktop Poppler	Version 0.43.0
Freedesktop Poppler	Version 0.44.0
Freedesktop Poppler	Version 0.45.0
Freedesktop Poppler	Version 0.46.0
Freedesktop Poppler	Version 0.47.0
Freedesktop Poppler	Version 0.48.0
Freedesktop Poppler	Version 0.49.0
Freedesktop Poppler	Version 0.50.0
Freedesktop Poppler	Version 0.51.0
Freedesktop Poppler	Version 0.52.0
Freedesktop Poppler	Version 0.53.0
Freedesktop Poppler	Version 0.54.0
Freedesktop Poppler	Version 0.55.0

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (4)

https://cgit.freedesktop.org/poppler/poppler/commit/?id=5c9b08a875b07853be6c44e43ff5f7f059df666a

Source: secalert@redhat.com

PatchThird Party Advisory

https://security.gentoo.org/glsa/201801-17

Source: secalert@redhat.com

https://cgit.freedesktop.org/poppler/poppler/commit/?id=5c9b08a875b07853be6c44e43ff5f7f059df666a

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://security.gentoo.org/glsa/201801-17

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.