CVE-2020-23876

概要

参考情報

• Aurorainfinity/Poc · Exploit
• kermitt2/pdf2xml · Exploit

pdf2xml のその他の脆弱性

• CVE-2020-23877緊急 9.8pdf2xml v2.0 was discovered to contain a stack buffer overflow in the component getObjectStream.
• CVE-2020-23874緊急 9.8pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::addAttributsNode.
• CVE-2020-23873緊急 9.8pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump.
• CVE-2020-23872高 7.5A NULL pointer dereference in the function TextPage::restoreState of pdf2xml v2.0 allows attackers to cause a denial of service (DoS).