CVE:CVE-2015-8868
CNNVD:CNNVD-201604-563
Poppler是一个用于生成PDF的C++类库，该库是从Xpdf（PDF阅读器）继承而来。
Poppler 0.40.0之前版本的‘ExponentialFunction::ExponentialFunction’函数中存在基于堆的缓冲区溢出漏洞。远程攻击者可借助特制的PDF文档中的ExtGState目录中无效的混合模式利用该漏洞造成拒绝服务（内存损坏和崩溃），或执行任意代码。
solution:Upgrade fedoraproject fedora to a higher version than 23,and avoid the version 23; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.10,and avoid the version 12.04,14.04,15.10; Upgrade freedesktop poppler to a higher version than 0.39.0,and avoid the version 0.39.0