Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Vendor states “it's an expected abort on out-of-memory error.”
References
| Link | Resource |
|---|---|
| https://gist.github.com/huanglei3/10e2a9bd07a109995b20ade306612a34 | Third Party Advisory |
| https://github.com/huanglei3/xpdf_aborted | Exploit |
| https://gist.github.com/huanglei3/10e2a9bd07a109995b20ade306612a34 | Third Party Advisory |
| https://github.com/huanglei3/xpdf_aborted | Exploit |
Configurations
History
21 Nov 2024, 07:52
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gist.github.com/huanglei3/10e2a9bd07a109995b20ade306612a34 - Third Party Advisory | |
| References | () https://github.com/huanglei3/xpdf_aborted - Exploit |
Information
Published : 2023-04-26 19:15
Updated : 2024-11-21 07:52
NVD link : CVE-2023-26930
Mitre link : CVE-2023-26930
CVE.ORG link : CVE-2023-26930
JSON object : View
Products Affected
xpdfreader
- xpdf
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')