ID CVE-2022-27135
Summary xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service (Segmentation fault) or other unspecified effects by sending a crafted PDF file to the pdftoppm binary.
References
Vulnerable Configurations
  • cpe:2.3:a:xpdfreader:xpdf:4.03:*:*:*:*:*:*:*
    cpe:2.3:a:xpdfreader:xpdf:4.03:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 05-05-2022 - 14:08)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:N/A:P
Last major update 05-05-2022 - 14:08
Published 25-04-2022 - 13:15
Last modified 05-05-2022 - 14:08
Back to Top