CVE-2020-23873

概要

参考情報

• cwe.mitre.org/data/definitions/122.html · Technical Description
• Aurorainfinity/Poc · Exploit
• kermitt2/pdf2xml · Exploit

pdf2xml のその他の脆弱性

• CVE-2020-23877緊急 9.8pdf2xml v2.0 was discovered to contain a stack buffer overflow in the component getObjectStream.
• CVE-2020-23876高 7.5pdf2xml v2.0 was discovered to contain a memory leak in the function TextPage::testLinkedText.
• CVE-2020-23874緊急 9.8pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::addAttributsNode.
• CVE-2020-23872高 7.5A NULL pointer dereference in the function TextPage::restoreState of pdf2xml v2.0 allows attackers to cause a denial of service (DoS).