CVE-2018-18456

概要

参考情報

• forum.xpdfreader.com/viewtopic.php · Third Party Advisory
• TeamSeri0us/pocs · Third Party Advisory

xpdf のその他の脆弱性

• CVE-2024-7868高 8.2In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT decoder. The proof-o…
• CVE-2024-7867中 6.2In Xpdf 4.05 (and earlier), very large coordinates in a page box can cause an integer overflow and divide-by-zero.
• CVE-2024-7866中 5.5In Xpdf 4.05 (and earlier), a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow.
• CVE-2024-4976中 5.5Out-of-bounds array write in Xpdf 4.05 and earlier, due to missing object type check in AcroForm field reference.
• CVE-2024-4568中 5.5In Xpdf 4.05 (and earlier), a PDF object loop in the PDF resources leads to infinite recursion and a stack overflow.