In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in strncpy from FoFiType1::parse in fofi/FoFiType1.cc because it does not ensure the source string has a valid length before making a fixed-length copy. It can, for example, be triggered by sending a crafted PDF document to the pdftotext tool. It allows an attacker to use a crafted pdf file to cause Denial of Service or an information leak, or possibly have unspecified other impact.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade libpoppler73Upgrade libpoppler-develUpgrade libpoppler-glib8Upgrade libpoppler-qt4-develUpgrade libpoppler-glib-develUpgrade libpoppler60Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-qt4-4Upgrade libpoppler44Upgrade libpoppler73-32bitUpgrade libpoppler-cpp0Upgrade poppler-tools | Aug 9, 2024 | Jul 4, 2019 |
| Ubuntu | — | Upgrade libpoppler73Upgrade poppler-utilsUpgrade libpoppler58 | Nov 27, 2020 | Jul 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub