CVE-2019-14289

Опубликовано: 27 июл. 2019

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

An issue was discovered in Xpdf 4.01.01. There is an integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "multiple bytes per line" case.

Ссылки

https://forum.xpdfreader.com/viewtopic.php?f=3&t=41851
Exploit
Third Party Advisory
https://github.com/TeamSeri0us/pocs/tree/master/xpdf/4.01.01
Exploit
Third Party Advisory
https://forum.xpdfreader.com/viewtopic.php?f=3&t=41851
Exploit
Third Party Advisory
https://github.com/TeamSeri0us/pocs/tree/master/xpdf/4.01.01
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:glyphandcog:xpdfreader:4.01.01:*:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00165

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVE-2019-14289

CVSS3: 5.5

ubuntu

больше 6 лет назад

An issue was discovered in Xpdf 4.01.01. There is an integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "multiple bytes per line" case.

CVE-2019-14289

CVSS3: 5.5

debian

больше 6 лет назад

An issue was discovered in Xpdf 4.01.01. There is an integer overflow ...

GHSA-52ph-9rmp-qw5c

CVSS3: 5.5

github

больше 3 лет назад

An issue was discovered in Xpdf 4.01.01. There is an integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "multiple bytes per line" case.

EPSS

Процентиль: 38%

0.00165

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-190