6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
77.7%
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in
xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to
0.15.1, kdegraphics, and possibly other products allows context-dependent
attackers to cause a denial of service (crash) and possibly execute
arbitrary code via a PDF file with a crafted PostScript Type1 font that
contains a negative array index, which bypasses input validation and
triggers memory corruption.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 18.04 | noarch | ipe | < any | UNKNOWN |
ubuntu | 20.04 | noarch | ipe | < any | UNKNOWN |
ubuntu | 22.04 | noarch | ipe | < any | UNKNOWN |
ubuntu | 23.10 | noarch | ipe | < any | UNKNOWN |
ubuntu | 24.04 | noarch | ipe | < any | UNKNOWN |
ubuntu | 16.04 | noarch | ipe | < any | UNKNOWN |
ubuntu | 6.06 | noarch | poppler | < 0.5.1-0ubuntu7.8 | UNKNOWN |
ubuntu | 8.04 | noarch | poppler | < 0.6.4-1ubuntu3.5 | UNKNOWN |
ubuntu | 9.04 | noarch | poppler | < 0.10.5-1ubuntu2.6 | UNKNOWN |
ubuntu | 9.10 | noarch | poppler | < 0.12.0-0ubuntu2.3 | UNKNOWN |