CVE-2018-16368

SplashXPath::strokeAdjust in splash/SplashXPath.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm.
References
Link Resource
https://github.com/TeamSeri0us/pocs/tree/master/xpdf Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:xpdfreader:xpdf:4.00:*:*:*:*:*:*:*

Information

Published : 2018-09-02 17:29

Updated : 2019-10-02 17:03


NVD link : CVE-2018-16368

Mitre link : CVE-2018-16368


JSON object : View

CWE
CWE-125

Out-of-bounds Read

Advertisement

dedicated server usa

Products Affected

xpdfreader

  • xpdf