CVE-2021-3508

概要

参考情報

• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• enferex/pdfresurrect · Exploit

pdfresurrect のその他の脆弱性

• CVE-2020-20740高 7.8PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdf_get_version().
• CVE-2020-9549高 7.8In PDFResurrect 0.12 through 0.19, get_type in pdf.c has an out-of-bounds write via a crafted PDF document.
• CVE-2019-14934高 7.8An issue was discovered in PDFResurrect before 0.18. pdf_load_pages_kids in pdf.c doesn't validate a certain size value, which leads to a ma…
• CVE-2019-14267高 7.8PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is mishandled.