CVE-2020-35376

概要

参考情報

• forum.xpdfreader.com/viewtopic.php · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZUU5QG6SSVRTKZTR3A72LDRVZETEI63
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VLOYVJSM54IL6I5RY4QTJGRS7PIEG44X

xpdf のその他の脆弱性

• CVE-2024-7868高 8.2In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT decoder. The proof-o…
• CVE-2024-7867中 6.2In Xpdf 4.05 (and earlier), very large coordinates in a page box can cause an integer overflow and divide-by-zero.
• CVE-2024-7866中 5.5In Xpdf 4.05 (and earlier), a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow.
• CVE-2024-4976中 5.5Out-of-bounds array write in Xpdf 4.05 and earlier, due to missing object type check in AcroForm field reference.
• CVE-2024-4568中 5.5In Xpdf 4.05 (and earlier), a PDF object loop in the PDF resources leads to infinite recursion and a stack overflow.