Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-24996

Опубликовано: 03 сент. 2020
Источник: debian
EPSS Низкий

Описание

There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
xpdfnot-affectedpackage

Примечания

  • https://forum.xpdfreader.com/viewtopic.php?f=3&t=42028

EPSS

Процентиль: 47%
0.00239
Низкий

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 5 лет назад

There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

CVSS3: 7.8
nvd
больше 5 лет назад

There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

github
больше 3 лет назад

There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

EPSS

Процентиль: 47%
0.00239
Низкий