PT-2019-13236 · Xpdf · Xpdf
CVE-2019-13282
·
Publicado
2019-07-04
·
Atualizado
2023-03-01
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Xpdf version 4.01.01
Description
A heap-based buffer over-read issue can be triggered in the SampledFunction::transform function when using a large index for samples, potentially allowing an attacker to cause Denial of Service or an information leak by sending a crafted PDF document. This could have unspecified other impacts.
Recommendations
For Xpdf version 4.01.01, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Xpdf