| Package | Affected versions | Patched versions |
|---|---|---|
| xpdf | < 4.06 | 4.06 |
In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes a segfault attempting to read from an invalid address.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free