High severity7.5NVD Advisory· Published Oct 2, 2017· Updated May 13, 2026
CVE-2017-14975
CVE-2017-14975
Description
The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability because a data structure is not initialized, which allows an attacker to launch a denial of service attack.
Affected products
4- cpe:2.3:a:freedesktop:poppler:0.59.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- bugzilla.freedesktop.org/show_bug.cginvdExploitIssue TrackingVDB EntryVendor Advisory
- lists.debian.org/debian-lts-announce/2017/11/msg00023.htmlnvdMailing ListThird Party Advisory
- www.debian.org/security/2018/dsa-4079nvdThird Party Advisory
News mentions
0No linked articles in our index yet.