CVE-2017-14977

Description

The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table pointer, which allows an attacker to launch a denial of service attack.

References

https://www.debian.org/security/2018/dsa-4079

https://lists.debian.org/debian-lts-announce/2017/11/msg00023.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3