Lucene search

MitreCVE-2018-11033

HistoryMay 14, 2018 - 12:29 a.m.

CVE-2018-11033

2018-05-1400:29:00

CWE-119

mitre

web.nvd.nist.gov

cve-2018-11033

dctstream

readhuffsym function

xpdf

denial of service

application crash

jpeg

vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

0.002

Percentile

55.3%

JSON

The DCTStream::readHuffSym function in Stream.cc in the DCT decoder in xpdf before 4.00 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JPEG data.

Affected configurations

Nvd

Node

xpdfreaderxpdfMatch4.00

VendorProductVersionCPE
xpdfreaderxpdf4.00cpe:2.3:a:xpdfreader:xpdf:4.00:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
xpdfreader	xpdf	4.00	cpe:2.3:a:xpdfreader:xpdf:4.00:::::::*

References

forum.xpdfreader.com/viewtopic.php?f=3&t=40842

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

0.002

Percentile

55.3%

JSON

Related for CVE-2018-11033