Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-7453

Опубликовано: 24 фев. 2018
Источник: debian

Описание

Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop checking, as demonstrated by pdftohtml.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
xpdfunfixedpackage

Примечания

  • https://forum.xpdfreader.com/viewtopic.php?p=814#p814

  • src:xpdf switched to use system poppler libary in 3.02-3

  • Reproducer correctly detected as broken with jessie's poppler build

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 8 лет назад

Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop checking, as demonstrated by pdftohtml.

CVSS3: 5.5
nvd
почти 8 лет назад

Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop checking, as demonstrated by pdftohtml.

CVSS3: 5.5
github
больше 3 лет назад

Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop checking, as demonstrated by pdftohtml.

CVSS3: 5.5
fstec
почти 8 лет назад

Уязвимость функции AcroForm::scanField программного обеспечения для просмотра PDF Xpdf, позволяющая нарушителю вызвать отказ в обслуживании