In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It allows an attacker to use a crafted PDF file to cause Denial of Service or possibly unspecified other impact.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | xpdf | < 3.04+git20220601-1 | xpdf_3.04+git20220601-1_all.deb |
Debian | 11 | all | xpdf | < 3.04+git20210103-3 | xpdf_3.04+git20210103-3_all.deb |
Debian | 10 | all | xpdf | < 3.04-13 | xpdf_3.04-13_all.deb |
Debian | 999 | all | xpdf | < 3.04+git20240202-1 | xpdf_3.04+git20240202-1_all.deb |
Debian | 13 | all | xpdf | < 3.04+git20240202-1 | xpdf_3.04+git20240202-1_all.deb |