CVE-2013-1789

CVE-2013-1789 describes a denial-of-service vulnerability in poppler versions prior to 0.22.1, specifically affecting the freedesktop poppler library. Attackers can trigger a NULL pointer dereference and crash by manipulating the Splash::arbitraryTransformMask, Splash::blitMask, or Splash::scaleMaskYuXu functions. This vulnerability has a CVSS score of 4.3, indicating a medium attack complexity and potential for partial availability impact, requiring network access but no authentication. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Despite the lack of active exploits, the CVE has garnered significant community discussion, with 10 mentions, placing it in the top 1% of all CVEs for community attention.