CVE:CVE-2019-9631
CNNVD:CNNVD-201903-266
Poppler是一个用于生成PDF的C++类库，该库是从Xpdf（PDF阅读器）继承而来。
Poppler 0.74.0版本中的CairoRescaleBox.cc文件的‘downsample_row_box_filter’函数存在基于堆的缓冲区越界读取漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
solution:Upgrade freedesktop poppler to a higher version than 0.74.0,and avoid the version 0.74.0; Upgrade fedoraproject fedora to a higher version than 28,29,30,and avoid the version 28,29,30; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0