Lucene search
Veracode Vulnerability DatabaseVERACODE:37804HistoryNov 03, 2022 - 7:43 a.m.
Denial Of Service (DoS)
2022-11-0307:43:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
vulnerability
denial of service
pdfdocumenthandler
EPSS
0.001
Percentile
39.8%
muhammara and hummus are vulnerable to denial of service. The vulnerability exists due to PDFDocumentHandler::WriteStreamObject in PDFDocumentHandler.cpp where the attacker supplies a maliciously crafted PDF file to be appended to another which will cause an application crash.
References
github.com/galkahana/HummusJS/commit/a9bf2520ab5abb69f9328906e406fbebfb36159a
github.com/galkahana/HummusJS/issues/293
github.com/galkahana/PDF-Writer/pull/180
github.com/julianhille/MuhammaraJS/commit/4df356bd28114ff2962e92be40e5e740d3fd6ceb
github.com/julianhille/MuhammaraJS/issues/191
github.com/julianhille/MuhammaraJS/pull/194
github.com/julianhille/MuhammaraJS/security/advisories/GHSA-rcrx-fpjp-mfrw
Related
prion
prion
Code injection
2022-11-02 15:15:00
cvelist
cvelist
nvd
nvd
CVE-2022-39381
2022-11-02 15:15:10
cve
cve
CVE-2022-39381
2022-11-02 15:15:10
osv
osv
Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cpp
2022-11-02 18:10:47
github
github
Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cpp
2022-11-02 18:10:47