PT-2018-18430

Name of the Vulnerable Software and Affected Versions: xpdf version 4.00 Description: The issue allows attackers to launch a denial of service via a specific pdf file, resulting in a heap-based buffer over-read and application crash. This can be achieved by exploiting the...

CVE-2018-8101: Out-of-bounds Read

The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...