Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-12515

Опубликовано: 02 июн. 2019
Источник: nvd
CVSS3: 7.1
CVSS2: 5.8
EPSS Низкий

Описание

There is an out-of-bounds read vulnerability in the function FlateStream::getChar() located at Stream.cc in Xpdf 4.01.01. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure or a denial of service.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:glyphandcog:xpdfreader:4.01.01:*:*:*:*:*:*:*

EPSS

Процентиль: 53%
0.00296
Низкий

7.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 7.1
ubuntu
больше 6 лет назад

There is an out-of-bounds read vulnerability in the function FlateStream::getChar() located at Stream.cc in Xpdf 4.01.01. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure or a denial of service.

CVSS3: 7.1
debian
больше 6 лет назад

There is an out-of-bounds read vulnerability in the function FlateStre ...

CVSS3: 7.1
github
больше 3 лет назад

There is an out-of-bounds read vulnerability in the function FlateStream::getChar() located at Stream.cc in Xpdf 4.01.01. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure or a denial of service.

EPSS

Процентиль: 53%
0.00296
Низкий

7.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-125