QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2019-13282

Back to search

CVE-2019-13282

Published: Jul 4, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in SampledFunction::transform in Function.cc when using a large index for samples. It can, for example, be triggered by sending a crafted PDF document to the pdftotext tool. It allows an attacker to use a crafted pdf file to cause Denial of Service or an information leak, or possibly have unspecified other impact.

VendorProductVersions

n/a

n/a

affected
n/a

References

FEDORA-2019-a457286734
vendor-advisory
x_refsource_FEDORA
FEDORA-2019-01da705767
vendor-advisory
x_refsource_FEDORA
FEDORA-2019-759ba8202b
vendor-advisory
x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now