<html> <head> <base href="https://bugs.freedesktop.org/" /> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW - Vulnerabilities report on libpoppler 0.18.4" href="https://bugs.freedesktop.org/show_bug.cgi?id=91414#c5">Comment # 5</a> on <a class="bz_bug_link bz_status_NEW " title="NEW - Vulnerabilities report on libpoppler 0.18.4" href="https://bugs.freedesktop.org/show_bug.cgi?id=91414">bug 91414</a> from <a class="email" href="mailto:vulns.bfs@ssi.gouv.fr" title="Julien Perrot <vulns.bfs@ssi.gouv.fr>"> Julien Perrot</a> <pre>Hi, The file results-evince.pdf in poppler-report.zip (attached to this ticket) sums up the results with the proof of concept files. A green cell means that opening the corresponding sample file in Evince resulted in the expected behavior. Especially, the files below (available in sample-pdf-files.tgz) seem to cause a segfault when loaded (at least with libpoppler 0.18.4) : - structure/destname.pdf - structure/destname-auto.pdf - structure/pagelabels2.pdf - structure/pagelabels3.pdf The files below seem to provoke a 100% CPU usage : - structure/outlines.pdf - structure/outlines2.pdf - structure/outlines3.pdf - structure/outlines4.pdf - structure/outlines-auto.pdf - structure/outlines-auto2.pdf - structure/outlines-auto3.pdf - structure/outlines-auto4.pdf</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the assignee for the bug.</li> </ul> </body> </html>