pdfresurrect

pdfresurrect PDFResurrect 是一个用于分析 PDF 文档的工具。PDF 格式允许将先前对文档所做的修改保留在文档的较新版本中，从而为文档创建一份持续的更改历史。该工具尝试修改 PDF，使阅读工具能够看到该 PDF 的先前版本。修改后的“版本”将作为新文件生成，原 PDF 保持不变。 注意事项 不应将清除功能（-s）用于任何严肃的安全用途。在使用这一实验性功能后，请务必确认它确实已将所有需要清零的对象（那些应被清零的对象）全部置零。目前该功能生成的 PDF 很可能无法正常渲染。 该工具依赖读取 pdfresurrect 提取版本的应用程序将最后一个 xref...

EUVD-2018-12811

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2022-27135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service Segmentation...

CVE-2022-27135

xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service Segmentation fault or other unspecified effects by sending a crafted PDF file to the pdftoppm binary...

CVE-2010-0207

In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service application crash in xpdf-based PDF viewers...

DEBIAN-CVE-2010-0207

In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service application crash in xpdf-based PDF viewers...

CVE-2010-0207

In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service application crash in xpdf-based PDF viewers...

CVE-2010-0207

CVE-2010-0207 affects xpdf: the vulnerability arises in the xref table where an infinite loop can be triggered, allowing remote attackers to cause a denial of service (crash) in xpdf-based PDF viewers. The connected documents corroborate the root cause as an infinite loop in the xref table and th...

CVE-2010-0207

In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service application crash in xpdf-based PDF viewers...

Type confusion

In Foxit Quick PDF Library all versions prior to 16.12, issue where loading a malformed or malicious PDF containing invalid xref table pointers or invalid xref table data using the LoadFromFile, LoadFromString, LoadFromStream, DAOpenFile or DAOpenFileReadOnly functions may result in an access...