CVE-2019-9903

Name of the Vulnerable Software and Affected Versions Poppler version 0.74.0

Description The issue is related to the function Dict::find() in the Dict.cc component of the Poppler library, which is used for displaying PDF files. It is caused by the PDFDoc::markObject function in PDFDoc.cc mishandling dict marking, leading to stack consumption. This can be triggered by passing a crafted PDF file to the pdfunite binary, potentially allowing a remote attacker to cause a denial of service.

Recommendations For Poppler version 0.74.0, consider updating to a newer version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.