PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2017-14975

CVE-2017-14975

poppler: NULL pointer dereference in the FoFiType1C::convertToType0 function

Loading…

Severity

Low

Red Hat Product Security

3.3

CVSS 3.0

Review impact separately from score.

Published · September 11, 2017

Updated · May 13, 2026

Description

The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability because a data structure is not initialized, which allows an attacker to launch a denial of service attack.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 3.3
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-476 · NULL Pointer Dereference