[Poppler-bugs] [Bug 91414] Vulnerabilities report on libpoppler 0.18.4

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=91414

--- Comment #5 from Julien Perrot <vulns.bfs at ssi.gouv.fr> ---
Hi,


The file results-evince.pdf in poppler-report.zip (attached to this ticket)
sums up the results with the proof of concept files. A green cell means that
opening the corresponding sample file in Evince resulted in the expected
behavior.

Especially, the files below (available in sample-pdf-files.tgz) seem to cause a
segfault when loaded (at least with libpoppler 0.18.4) :

- structure/destname.pdf
- structure/destname-auto.pdf
- structure/pagelabels2.pdf
- structure/pagelabels3.pdf

The files below seem to provoke a 100% CPU usage :

- structure/outlines.pdf
- structure/outlines2.pdf
- structure/outlines3.pdf
- structure/outlines4.pdf
- structure/outlines-auto.pdf
- structure/outlines-auto2.pdf
- structure/outlines-auto3.pdf
- structure/outlines-auto4.pdf

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/poppler-bugs/attachments/20150722/f4daa47b/attachment.html>