XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (stack consumption) via a crafted pdf file, related to AcroForm::scanField, as demonstrated by pdftohtml. NOTE: this might overlap CVE-2018-7453.
References
Link | Resource |
---|---|
https://github.com/TeamSeri0us/pocs/tree/master/xpdf | Exploit Third Party Advisory |
Configurations
Information
Published : 2018-09-02 17:29
Updated : 2019-10-02 17:03
NVD link : CVE-2018-16369
Mitre link : CVE-2018-16369
JSON object : View
CWE
Products Affected
xpdfreader
- xpdf