Xpdf Denial of Service Vulnerability (CNVD-2019-17488)

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. A denial of service vulnerability exists in catalog-getNumPages in AcroForm.cc in Xpdf 4.00. An attacker can exploit this vulnerability to cause a denial of service hang caused by a lar...

PT-2018-14561

Name of the Vulnerable Software and Affected Versions Xpdf version 4.00 Description An issue in the catalog-getNumPages function in AcroForm.cc allows attackers to launch a denial of service attack, causing the system to hang due to a large loop, via a specific pdf file. This is mainly caused by ...

CVE-2018-18651: Excessive Iteration

An issue was discovered in Xpdf 4.00. catalog-getNumPages in AcroForm.cc allows attackers to launch a denial of service hang caused by large loop via a specific pdf file, as demonstrated by pdftohtml. This is mainly caused by a large number after the /Count field in the file...