CVE-2018-11033: Improper Restriction of Operations within the Bounds of a Memory Buffer

The DCTStream::readHuffSym function in Stream.cc in the DCT decoder in xpdf before 4.00 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via crafted JPEG data...

xpdf 'DCTStream::readHuffSym' function denial of service vulnerability

Xpdf is an open source PDF reader developed by Foo Labs , it supports decoding LZW compressed format files and read encrypted PDF files.DCT decoder is one of the DCT decoder . Xpdf 4.00 before the version of the DCT decoder in the Stream.cc file 'DCTStream::readHuffSym' function has a security...