CVE-2017-11626

Name of the Vulnerable Software and Affected Versions QPDF version 6.0.0

Description A stack-consumption issue was found in libqpdf, related to the QPDFTokenizer::resolveLiteral function, which can lead to a denial of service via a crafted file. This issue is associated with an "infinite loop" after four consecutive calls to QPDFObjectHandle::parseInternal. The exploitation of this issue may allow a remote attacker to cause a denial of service.

Recommendations For QPDF version 6.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.