CVE-2019-17064

Mô tả

Tham khảo

• packetstormsecurity.com/files/154713/Xpdf-4.02-NULL-Pointer-Dereference.html · Exploit
• forum.xpdfreader.com/viewtopic.php · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D5PYIAP2RXTYD4Y4FYFIK5K644LMDJWX
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMDB2CGUYDW2RENE2I2TT6QNFEEI2CNF

Lỗ hổng khác của xpdfreader

• CVE-2021-40226CAO 7.5xpdfreader 4.03 is vulnerable to Buffer Overflow.
• CVE-2022-24107CAO 7.8Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc.
• CVE-2022-24106CAO 7.8In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the imag…
• CVE-2019-16115CAO 7.8In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::…
• CVE-2019-16088TRUNG BÌNH 5.5Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc.