CVE-2019-7310 vulnerability in FreeDesktop and Other Products
Published on February 3, 2019
In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document, as demonstrated by pdftocairo.
Products Associated with CVE-2019-7310
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2019-7310 are published in these products:
Exploit Probability
EPSS
0.30%
Percentile
53.03%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.