Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-8101

Опубликовано: 14 мар. 2018
Источник: nvd
CVSS3: 5.5
CVSS2: 4.3
EPSS Низкий

Описание

The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and application crash) via a specific pdf file, as demonstrated by pdftohtml.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:xpdfreader:xpdf:4.00:*:*:*:*:*:*:*

EPSS

Процентиль: 36%
0.00148
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

ubuntu логотип

CVE-2018-8101

CVSS3: 5.5
ubuntu
почти 8 лет назад

The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and application crash) via a specific pdf file, as demonstrated by pdftohtml.

debian логотип

CVE-2018-8101

CVSS3: 5.5
debian
почти 8 лет назад

The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf ...

github логотип

GHSA-j73x-86wx-jcmg

CVSS3: 5.5
github
больше 3 лет назад

The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and application crash) via a specific pdf file, as demonstrated by pdftohtml.

EPSS

Процентиль: 36%
0.00148
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125