CVE		CVE-2008-2950
Status		Candidate
Description		The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document.
Phase		Assigned (30.06.2008)
SecurityVulns:		libpoppler library uninitialized pointer
		poppler library DoS
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2950
References		BUGTRAQ : 20080707 [oCERT-2008-007] libpoppler uninitialized pointer
		MISC : http://www.ocert.org/advisories/ocert-2008-007.html