Vulnerability in Freedesktop Poppler

CVE-2013-1789

splash/Splash.cc in poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to the (1) Splash::arbitraryTransformMask, (2) Splash::blitMask, and (3) Splash::scaleMaskYuXu functions.

EPSS: 0.024 (82.2th percentile) — read the EPSS interpretation.

Affected products

References