Описание
In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 1.8.0 (исключая) до 1.8.14 (включая)Версия от 2.0.0 (включая) до 2.0.10 (включая)
Одно из
cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:*
cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:*
cpe:2.3:a:apache:pdfbox:2.0.0:rc1:*:*:*:*:*:*
cpe:2.3:a:apache:pdfbox:2.0.0:rc2:*:*:*:*:*:*
cpe:2.3:a:apache:pdfbox:2.0.0:rc3:*:*:*:*:*:*
EPSS
Процентиль: 68%
0.00568
Низкий
6.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-835
Связанные уязвимости
CVSS3: 6.5
ubuntu
больше 7 лет назад
In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser.
CVSS3: 6.5
redhat
больше 7 лет назад
In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser.
CVSS3: 6.5
debian
больше 7 лет назад
In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully c ...
EPSS
Процентиль: 68%
0.00568
Низкий
6.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-835