In Poppler 0.59.0, memory corruption occurs in a call to Object::dictLookup() in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opFill, Gfx::doPatternFill, Gfx::doTilingPatternFill and Gfx::drawForm calls (aka a Gfx.cc infinite loop), a different vulnerability than CVE-2017-14519.
Weakness
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Poppler | Freedesktop | 0.59.0 (including) | 0.59.0 (including) |
| Poppler | Ubuntu | devel | * |
| Poppler | Ubuntu | esm-infra/xenial | * |
| Poppler | Ubuntu | trusty | * |
| Poppler | Ubuntu | xenial | * |
| Poppler | Ubuntu | zesty | * |