---

CVE-2020-35702 - log back

CVE-2020-35702 edited at 04 Jan 2021 15:34:09
Severity	- Medium + High

CVE-2020-35702 edited at 26 Dec 2020 14:32:18
Severity	- Unknown + Medium
Remote	- Unknown + Local
Type	- Unknown + Arbitrary code execution
Description	+ DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document.
References	+ https://gitlab.freedesktop.org/poppler/poppler/-/issues/1011 + https://gitlab.freedesktop.org/poppler/poppler/uploads/8455cee26a313a3a0174a01e4ec80e33/poc + https://gitlab.freedesktop.org/poppler/poppler/-/commit/ae614bf8ab42c9d0c7ac57ecdfdcbcfc4ff6c639
Notes

CVE-2020-35702 created at 26 Dec 2020 14:30:17