The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a denial of service (infinite recursion) via a crafted PDF file, as demonstrated by pdftops. Upstream bug: https://bugzilla.freedesktop.org/show_bug.cgi?id=103238 Upstream patch: https://cgit.freedesktop.org/poppler/poppler/commit/?id=60b4fe65bc9dc9b82bbadf0be2e3781be796a13d
Created mingw-poppler tracking bugs for this issue: Affects: fedora-all [bug 1578781] Created poppler tracking bugs for this issue: Affects: fedora-all [bug 1578780]
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2018:3140 https://access.redhat.com/errata/RHSA-2018:3140