En resumen
- CVE-2022-24197 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a com.itextpdf:itext7-core, itext (itextpdf).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.3%, mayor que el 70.4% de las vulnerabilidades.
- Solución: actualizar a 7.1.18, 7.2.2 o posterior.
Description
iText v7.1.17 was discovered to contain a stack-based buffer overflow via the component ByteBuffer.append, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
NVD description
iText v7.1.17 was discovered to contain a stack-based buffer overflow via the component ByteBuffer.append, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
Más vulnerabilidades de com.itextpdf:itext7-core
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free