CVE-2018-18459
18.10.2018, 06:29
The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated by pdftoppm.Enginsight
| Vendor | Product | Version |
|---|---|---|
| xpdfreader | xpdf | 4.00 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ipe |
| ||||||||||||||||||||||||||||||
| libextractor |
| ||||||||||||||||||||||||||||||
| poppler |
| ||||||||||||||||||||||||||||||
| xpdf |
|
Common Weakness Enumeration