CVE-2017-14927
gir1.2-poppler-0.18: In Poppler 0.59.0, a NULL Pointer Dereference exists in the SplashOutputDev::type3D0() function in SplashOutputDev.cc...
CVE-2017-14927 is fixed in 7 products on 1 platform, first by gir1.2-poppler-0.18 0.57.0-2ubuntu4, released June 24, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0090
59th percentile
In Poppler 0.59.0, a NULL Pointer Dereference exists in the SplashOutputDev::type3D0() function in SplashOutputDev.cc via a crafted PDF document.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| gir1.2-poppler-0.18 · Ubuntu 18.04.6 LTS (bionic) | 0.57.0-2ubuntu4 | gir1.2-poppler-0.18 0.57.0-2ubuntu4 | Jun 24, 2019 |
| libpoppler-cpp0v5 · Ubuntu 18.04.6 LTS (bionic) | 0.57.0-2ubuntu4 | libpoppler-cpp0v5 0.57.0-2ubuntu4 | Jun 24, 2019 |
| libpoppler-glib8 · Ubuntu 18.04.6 LTS (bionic) | 0.57.0-2ubuntu4 | libpoppler-glib8 0.57.0-2ubuntu4 | Jun 24, 2019 |
| libpoppler-qt4-4 · Ubuntu 18.04.6 LTS (bionic) | 0.57.0-2ubuntu4 | libpoppler-qt4-4 0.57.0-2ubuntu4 | Jun 24, 2019 |
| libpoppler-qt5-1 · Ubuntu 18.04.6 LTS (bionic) | 0.57.0-2ubuntu4 | libpoppler-qt5-1 0.57.0-2ubuntu4 | Jun 24, 2019 |
| libpoppler68 · Ubuntu 18.04.6 LTS (bionic) | 0.57.0-2ubuntu4 | libpoppler68 0.57.0-2ubuntu4 | Jun 24, 2019 |
| poppler-utils · Ubuntu 18.04.6 LTS (bionic) | 0.57.0-2ubuntu4 | poppler-utils 0.57.0-2ubuntu4 | Jun 24, 2019 |