Lucene search
HistoryMay 06, 2024 - 8:15 p.m.
CVE-2024-4568
xpdf security vulnerability
pdf object loop
stack overflow
2.9 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
8.8%
In Xpdf 4.05 (and earlier), a PDF object loop in the PDF resources leads to infinite recursion and a stack overflow.
CNA Affected
[
{
"defaultStatus": "unaffected",
"platforms": [
"all"
],
"product": "Xpdf",
"vendor": "Xpdf",
"versions": [
{
"lessThanOrEqual": "4.05",
"status": "affected",
"version": "0",
"versionType": "version"
}
]
}
]Related
nvd
nvd
CVE-2024-4568
2024-05-06 20:15:12
ubuntucve
ubuntucve
CVE-2024-4568
2024-05-06 00:00:00
cvelist
cvelist
2.9 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
8.8%
Related for CVE-2024-4568