Secunia

Two vulnerabilities have been reported in Poppler, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) An uninitialised memory access error in the "FormWidgetChoice::loadDefaults()" function can be exploited to cause a crash via a specially crafted PDF document.

2) An error in the "JBIG2Stream::readSymbolDictSeg()" function can be exploited to cause a crash via a specially crafted PDF document.

The vulnerabilities are reported in versions prior to 0.10.4.

Solution
Update to version 0.10.4.

Provided and/or discovered by
Reported in a Poppler bug report by:
1) vlad
2) Mario Kemper (Romario)

Changelog
Further details available in Customer Area

Original Advisory
1) https://bugs.edge.launchpad.net/poppler/+bug/321764
2) https://bugs.edge.launchpad.net/poppler/+bug/320181

Deep Links
Links available in Customer Area