Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Vendor states “it's an expected abort on out-of-memory error.”
References
| Link | Resource |
|---|---|
| https://gist.github.com/huanglei3/10e2a9bd07a109995b20ade306612a34 | Third Party Advisory |
| https://github.com/huanglei3/xpdf_aborted | Exploit |
Configurations
History
07 Nov 2023, 04:09
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Vendor states “it's an expected abort on out-of-memory error.” |
02 Jun 2023, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | ** DISPUTED ** Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Vendor states “it's an expected abort on out-of-memory error.” |
Information
Published : 2023-04-26 19:15
Updated : 2024-08-02 12:16
NVD link : CVE-2023-26930
Mitre link : CVE-2023-26930
CVE.ORG link : CVE-2023-26930
JSON object : View
Products Affected
xpdfreader
- xpdf
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')