PT-2019-14519 · Foolabs+1 · Xpdf+1
CVE-2019-16115
·
Publicado
2019-09-08
·
Atualizado
2023-08-23
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Xpdf version 4.01.01
Description
A stack-based buffer under-read issue exists in the IdentityFunction::transform function in Function.cc, which is used by GfxAxialShading::getColor. This issue can be triggered by sending a crafted PDF document to the pdftoppm tool, allowing an attacker to cause Denial of Service or possibly other unspecified impact.
Recommendations
For Xpdf version 4.01.01, at the moment, there is no information about a newer version that contains a fix for this issue.
Exploit
Correção
DoS
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Suse
Xpdf