Xpdf Denial of Service Vulnerability (CNVD-2019-17488)

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. A denial of service vulnerability exists in catalog-getNumPages in AcroForm.cc in Xpdf 4.00. An attacker can exploit this vulnerability to cause a denial of service hang caused by a lar...

CVE-2018-18651: Excessive Iteration

An issue was discovered in Xpdf 4.00. catalog-getNumPages in AcroForm.cc allows attackers to launch a denial of service hang caused by large loop via a specific pdf file, as demonstrated by pdftohtml. This is mainly caused by a large number after the /Count field in the file...