CVEvulnerability

CVE-2013-1789

4.3 MEDIUM Published 2013-04-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-04-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P

Description

splash/Splash.cc in poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to the (1) Splash::arbitraryTransformMask, (2) Splash::blitMask, and (3) Splash::scaleMaskYuXu functions.

Affected configurations

• freedesktop poppler (<= 0.22.0)

References