Buffer overflow in Freedesktop Poppler

CVE-2013-1788

poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger an "invalid memory access" in (1) splash/Splash.cc, (2) poppler/Function.cc, and (3) poppler/Stream.cc.

Vulnerability class: Buffer Overflow

EPSS: 0.039 (89.1th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References