PDFunite Buffer Overflow Vulnerability in Poppler Library

A buffer overflow vulnerability has been identified in PDFunite version 0.41.0, which is part of the Poppler package in Ubuntu. This vulnerability allows local attackers to crash the application by merging malformed PDF files. The issue arises from improper boundary validation in the XRef::getEntry function within the Poppler library, leading to a segmentation fault when the crafted PDF is processed.

Impact

Exploitation of this vulnerability causes a segmentation fault, crashing the PDFunite application.

Reproduction

The vulnerability can be reproduced by using PDFunite to merge two PDF files, one of which is specially crafted to be malformed. This can be done by creating a PDF that exploits the buffer overflow when processed by PDFunite.

Remediation

Users can upgrade to a patched version of Poppler to address this vulnerability.