[poppler] A few vulnerabilitiess in libpoppler

mpsuzuki at hiroshima-u.ac.jp mpsuzuki at hiroshima-u.ac.jp
Thu Oct 21 03:53:08 PDT 2010


Hi,

On Thu, 21 Oct 2010 12:09:40 +0200
<robert at swiecki.net> wrote:
>I was recently fuzzing libpoppler and found lots of crashes in it.
>Some of them are of lesser importance, some look more serious. The
>archive is here:
>
>http://alt.swiecki.net/j/poppler_2010.10.20.tgz
>
>I tested it with Ubuntu's pdftoppm from poppler-utils_0.12.4-0ubuntu5
>package on a 64bit system.

Your fuzzing test has been helpful for the improvement
of FreeType2, thanks. But poppler-0.12.4 might be slightly
too old to ask for poppler maintainers' efforts. I will
check your samples by the latest revision on git, on
GNU/Linux on amd64.

Regards,
mpsuzuki


More information about the poppler mailing list