Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8qjh-h494-v558

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (stack consumption) via a crafted pdf file, related to AcroForm::scanField, as demonstrated by pdftohtml. NOTE: this might overlap CVE-2018-7453.

XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (stack consumption) via a crafted pdf file, related to AcroForm::scanField, as demonstrated by pdftohtml. NOTE: this might overlap CVE-2018-7453.

EPSS

Процентиль: 76%
0.01618
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 8 лет назад

XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (stack consumption) via a crafted pdf file, related to AcroForm::scanField, as demonstrated by pdftohtml. NOTE: this might overlap CVE-2018-7453.

CVSS3: 5.5
nvd
около 8 лет назад

XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (stack consumption) via a crafted pdf file, related to AcroForm::scanField, as demonstrated by pdftohtml. NOTE: this might overlap CVE-2018-7453.

CVSS3: 5.5
debian
около 8 лет назад

XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a ...

CVSS3: 5.5
fstec
около 8 лет назад

Уязвимость функции XRef::fetch (XRef.cc) программного обеспечения для просмотра PDF Xpdf, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 9.8
altlinux
больше 2 лет назад

ALT-PU-2024-7465: package `xpdf` update to version 4.05-alt1

EPSS

Процентиль: 76%
0.01618
Низкий

5.5 Medium

CVSS3