Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2020-24996HistorySep 03, 2020 - 11:15 p.m.
CVE-2020-24996
2020-09-0323:15:00
Debian Security Bug Tracker
security-tracker.debian.org
5
0.001 Low
EPSS
Percentile
50.0%
There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | xpdf | < 3.04+git20220601-1 | xpdf_3.04+git20220601-1_all.deb |
| Debian | 11 | all | xpdf | < 3.04+git20210103-3 | xpdf_3.04+git20210103-3_all.deb |
| Debian | 10 | all | xpdf | < 3.04-13 | xpdf_3.04-13_all.deb |
| Debian | 999 | all | xpdf | < 3.04+git20240202-1 | xpdf_3.04+git20240202-1_all.deb |
| Debian | 13 | all | xpdf | < 3.04+git20240202-1 | xpdf_3.04+git20240202-1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2020-24996
2020-09-03 00:00:00
cvelist
cvelist
CVE-2020-24996
2020-09-03 22:17:33
prion
prion
Design/Logic Flaw
2020-09-03 23:15:00
cve
cve
CVE-2020-24996
2020-09-03 23:15:00
openvas
openvas
Xpdf <= 4.02 Multiple DoS Vulnerabilities
2020-09-08 00:00:00