CVE-2018-11797
EUVD-2018-060705.10.2018, 20:29
In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | pdfbox | 1.8.0 ≤ 𝑥 ≤ 1.8.15 |
| apache | pdfbox | 2.0.1 ≤ 𝑥 ≤ 2.0.11 |
| apache | pdfbox | 2.0:rc1 |
| apache | pdfbox | 2.0:rc2 |
| apache | pdfbox | 2.0:rc3 |
| apache | pdfbox | 2.0.0 |
| oracle | retail_xstore_point_of_service | 17.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libpdfbox-java |
| ||||||||||||||||||||||||||||||
| libpdfbox2-java |
|
References