CVE-2018-13988
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 3.1%
Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.
Affected products
n/a · n/aReferences
http://packetstormsecurity.com/files/148661/PDFunite-0.62.0-Buffer-Overflow.htmlhttps://access.redhat.com/errata/RHBA-2019:0327https://access.redhat.com/errata/RHSA-2018:3140https://access.redhat.com/errata/RHSA-2018:3505https://bugzilla.novell.com/show_bug.cgi?id=CVE-2018-13988https://bugzilla.redhat.com/show_bug.cgi?id=1602838https://cgit.freedesktop.org/poppler/poppler/commit/?id=004e3c10df0abda214f0c293f9e269fdd979c5eehttps://lists.debian.org/debian-lts-announce/2018/10/msg00024.htmlhttps://usn.ubuntu.com/3757-1/