Lucene search

K
cvelistMitreCVELIST:CVE-2017-12595
HistoryAug 27, 2017 - 3:00 p.m.

CVE-2017-12595

2017-08-2715:00:00
mitre
www.cve.org
6

AI Score

8

Confidence

High

EPSS

0.004

Percentile

74.8%

The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause a denial of service (stack consumption and segmentation fault) or possibly have unspecified other impact via a PDF document with a deep data structure, as demonstrated by a crash in QPDFObjectHandle::parseInternal in libqpdf/QPDFObjectHandle.cc.

AI Score

8

Confidence

High

EPSS

0.004

Percentile

74.8%