In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack.
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Poppler | Freedesktop | 0.68.0 (including) | 0.68.0 (including) |
| Red Hat Enterprise Linux 7 | RedHat | evince-0:3.28.2-8.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | okular-0:4.10.5-7.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | poppler-0:0.26.5-38.el7 | * |
| Poppler | Ubuntu | bionic | * |
| Poppler | Ubuntu | cosmic | * |
| Poppler | Ubuntu | devel | * |
| Poppler | Ubuntu | trusty | * |
| Poppler | Ubuntu | xenial | * |