Xpdf <= 4.02 Multiple DoS Vulnerabilities

Xpdf is prone to multiple denial of service DoS vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2020-24996

There is an invalid memory access in the function TextString::TextString located in Catalog.cc in Xpdf 4.0.2. It can be triggered by for example sending a crafted pdf file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service Segmentation fault or possibly have...

CVE-2020-24996

CVE-2020-24996 affects Xpdf 4.0.2, with an invalid memory access in TextString::~TextString() in Catalog.cc. A crafted PDF sent to the pdftohtml binary can trigger a Denial of Service (segmentation fault) and potentially other impacts. Exploitation details, affected versions beyond 4.0.2, and rem...