CVE:CVE-2019-14494
CNNVD:CNNVD-201908-131
Poppler是一个用于生成PDF的C++类库，该库是从Xpdf（PDF阅读器）继承而来。
Poppler 0.78.0及之前版本中的SplashOutputDev.cc文件的‘SplashOutputDev::tilingPatternFill’函数存在数字错误漏洞。该漏洞源于网络系统或产品未正确计算或转换所产生的数字。攻击者可利用该漏洞导致整数溢出或符号错误等。
solution:Upgrade freedesktop poppler to a higher version than 0.78.0,and avoid the version (,0.78.0]; Upgrade canonical ubuntu_linux to a higher version than 18.04,19.04,and avoid the version 18.04,19.04; Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0