In Xpdf 4.01.01, there is an out-of-bounds read vulnerability in the function SplashXPath::strokeAdjust() located at splash/SplashXPath.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure. This is related to CVE-2018-16368.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade libpoppler73Upgrade libpoppler-glib8Upgrade libpoppler-qt4-4Upgrade libpoppler-qt4-develUpgrade poppler-toolsUpgrade libpoppler60Upgrade libpoppler-cpp0Upgrade libpoppler73-32bitUpgrade typelib-1_0-Poppler-0_18 | Aug 9, 2024 | Jul 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub