NVD

Id
28886  
Name
CVE-2015-8868  
Description
Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF document.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-05-06  
Modified Date
2016-11-30  
Seq
2015-8868  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
152247 28886 CVE-2015-8868 FEDORA-2016-3c4e438fc8  View
152248 28886 CVE-2015-8868 FEDORA-2016-c848d48286  View
152249 28886 CVE-2015-8868 openSUSE-SU-2016:1322  View
152250 28886 CVE-2015-8868 openSUSE-SU-2016:1630  View
152251 28886 CVE-2015-8868 DSA-3563  View
152252 28886 CVE-2015-8868 [oss-security] 20160411 CVE request: Poppler < 0.40.0  View
152253 28886 CVE-2015-8868 89324  View
152254 28886 CVE-2015-8868 USN-2958-1  View
152255 28886 CVE-2015-8868 https://bugs.freedesktop.org/show_bug.cgi?id=93476  View
152256 28886 CVE-2015-8868 https://cgit.freedesktop.org/poppler/poppler/commit/?id=b3425dd3261679958cd56c0f71995c15d2124433  View
152257 28886 CVE-2015-8868 https://poppler.freedesktop.org/releases.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11802 JVNDB-2015-007122 Poppler の ExponentialFunction::ExponentialFunction 関数におけるヒープベースのバッファオーバーフローの脆弱性 Poppler の ExponentialFunction::ExponentialFunction 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2015-8868 86093 CVE-2015-8868 28886 9.3 7.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007122.html 2015-12-22 2016-05-11 View