High severity7.5NVD Advisory· Published Oct 2, 2017· Updated May 13, 2026
CVE-2017-14977
CVE-2017-14977
Description
The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table pointer, which allows an attacker to launch a denial of service attack.
Affected products
4- cpe:2.3:a:freedesktop:poppler:0.59.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- bugs.freedesktop.org/show_bug.cginvdExploitIssue TrackingVendor Advisory
- lists.debian.org/debian-lts-announce/2017/11/msg00023.htmlnvdMailing ListThird Party Advisory
- www.debian.org/security/2018/dsa-4079nvdThird Party Advisory
News mentions
0No linked articles in our index yet.