CVE-2019-9587

概要

参考情報

• forum.xpdfreader.com/viewtopic.php · Exploit
• research.loginsoft.com/bugs/stack-based-buffer-overflow-vulnerability-in-function-md5round1-xpdf-4-01 · Exploit

xpdfreader のその他の脆弱性

• CVE-2021-40226高 7.5xpdfreader 4.03 is vulnerable to Buffer Overflow.
• CVE-2022-24107高 7.8Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc.
• CVE-2022-24106高 7.8In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the imag…
• CVE-2019-17064中 5.5Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor.
• CVE-2019-16115高 7.8In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::…