xpdf v4.04 was discovered to contain a stack overflow in the component
pdftotext.
Author | Note |
---|---|
ebarretto | xpdf in Debian uses poppler, which is not affected or fixed |
www.xpdfreader.com/download.html
xpdf.com
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27655
forum.xpdfreader.com/viewtopic.php?t=42398
github.com/keepinggg/poc/blob/main/poc_of_xpdf/id2
github.com/keepinggg/poc/tree/main/poc_of_xpdf
launchpad.net/bugs/cve/CVE-2023-27655
nvd.nist.gov/vuln/detail/CVE-2023-27655
security-tracker.debian.org/tracker/CVE-2023-27655