Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2019-12958

Опубликовано: 25 июн. 2019
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3
CVSS3: 5.5

Описание

In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc when it is trying to access the second privateDicts array element, because the privateDicts array has only one element allocated.

РелизСтатусПримечание
bionic

not-affected

code not present
cosmic

ignored

end of life
devel

not-affected

code not present
disco

not-affected

code not present
eoan

not-affected

code not present
esm-apps/bionic

not-affected

code not present
esm-apps/focal

not-affected

code not present
esm-apps/jammy

not-affected

code not present
esm-apps/xenial

not-affected

code not present
esm-infra-legacy/trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

code not present
cosmic

ignored

end of life
devel

not-affected

code not present
disco

not-affected

code not present
eoan

not-affected

code not present
esm-apps/bionic

not-affected

code not present
esm-apps/focal

not-affected

code not present
esm-apps/jammy

not-affected

code not present
esm-apps/xenial

not-affected

code not present
esm-infra-legacy/trusty

not-affected

code not present

Показывать по

РелизСтатусПримечание
bionic

released

0.57.0-2ubuntu4
cosmic

released

0.57.0-2ubuntu4
devel

released

0.57.0-2ubuntu4
disco

released

0.57.0-2ubuntu4
eoan

released

0.57.0-2ubuntu4
esm-infra-legacy/trusty

DNE

esm-infra/bionic

released

0.57.0-2ubuntu4
esm-infra/focal

released

0.57.0-2ubuntu4
esm-infra/xenial

released

0.41.0-0ubuntu1.6
focal

released

0.57.0-2ubuntu4

Показывать по

РелизСтатусПримечание
bionic

not-affected

code not present
cosmic

ignored

end of life
devel

not-affected

code not present
disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

not-affected

code not present
esm-apps/jammy

not-affected

cde not present
esm-apps/xenial

not-affected

code not present
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

Показывать по

EPSS

Процентиль: 42%
0.00201
Низкий

4.3 Medium

CVSS2

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
nvd
больше 6 лет назад

In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc when it is trying to access the second privateDicts array element, because the privateDicts array has only one element allocated.

CVSS3: 5.5
debian
больше 6 лет назад

In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in F ...

github
больше 3 лет назад

In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc when it is trying to access the second privateDicts array element, because the privateDicts array has only one element allocated.

EPSS

Процентиль: 42%
0.00201
Низкий

4.3 Medium

CVSS2

5.5 Medium

CVSS3