Описание
An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref allows an attacker to cause denial of service because loop detection exists only for tables, not streams.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:xpdfreader:xpdf:4.00:*:*:*:*:*:*:*
EPSS
Процентиль: 56%
0.0083
Низкий
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-835
Связанные уязвимости
CVSS3: 5.5
ubuntu
больше 8 лет назад
An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref allows an attacker to cause denial of service because loop detection exists only for tables, not streams.
CVSS3: 5.5
debian
больше 8 лет назад
An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref a ...
CVSS3: 5.5
github
больше 4 лет назад
An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref allows an attacker to cause denial of service because loop detection exists only for tables, not streams.
EPSS
Процентиль: 56%
0.0083
Низкий
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-835