CVE-2017-14977

Name of the Vulnerable Software and Affected Versions Poppler version 0.59.0

Description The issue is related to a NULL pointer dereference vulnerability in the FoFiTrueType::getCFFBlock function due to lack of validation of a table pointer. This allows an attacker to launch a denial of service attack.

Recommendations For Poppler version 0.59.0, update to a version that fixes the NULL pointer dereference vulnerability in the FoFiTrueType::getCFFBlock function. As a temporary workaround, consider restricting access to the FoFiTrueType::getCFFBlock function until a patch is available.