CVE-2022-24106

概要

参考情報

• xpdfreader.com/security-fixes.html · Vendor Advisory
• dl.xpdfreader.com/xpdf-4.04.tar.gz · Product

xpdfreader のその他の脆弱性

• CVE-2021-40226高 7.5xpdfreader 4.03 is vulnerable to Buffer Overflow.
• CVE-2022-24107高 7.8Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc.
• CVE-2019-17064中 5.5Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor.
• CVE-2019-16115高 7.8In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::…
• CVE-2019-16088中 5.5Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc.