| Package | Affected versions | Patched versions |
|---|---|---|
| xpdfreader | = 4.01.01 |
A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf 4.01.01. It can, for example, be triggered by sending crafted TrueType data in a PDF document to the pdftops tool. It might allow an attacker to cause Denial of Service or leak memory data into dump content.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free