xpdf:fuzz_pdfload: Heap-buffer-overflow in JPXStream::inverseTransformLevel

Detailed Report: https://oss-fuzz.com/testcase?key=4897295645147136 Project: xpdf Fuzzing Engine: afl Fuzz Target: fuzzpdfload Job Type: aflasanxpdf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x606000003d1c Crash State: JPXStream::inverseTransformLevel...

CVE-2018-8101

The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

UBUNTU-CVE-2018-8101

The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8101

The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8101

CVE-2018-8101 affects xpdf 4.00, where JPXStream::inverseTransformLevel (JPXStream.cc) can cause a denial of service via a specific PDF, resulting in a heap-based buffer over-read and application crash (as demonstrated by pdftohtml). The connected documents corroborate the exact function and vuln...

PT-2018-18430

Name of the Vulnerable Software and Affected Versions: xpdf version 4.00 Description: The issue allows attackers to launch a denial of service via a specific pdf file, resulting in a heap-based buffer over-read and application crash. This can be achieved by exploiting the...

xpdf denial of service vulnerability (CNVD-2018-06678)

Xpdf is an open source PDF file viewer, this software runs on X Window as well as Motif. xpdf also runs on all classes of Unix operating systems. xpdf 4.00 in the JPXStream.cc in the JPXStream::inverseTransformLevel function there is a denial of service vulnerability. An attacker can exploit this...

CVE-2018-8101: Out-of-bounds Read

The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...