PT-2018-12822 · Pdf2Json · Pdf2Json

Fouzhe · Publicado 2018-08-05 · Atualizado 2018-10-04 · CVE-2018-14946

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PDF2JSON version 0.69

Description The issue is related to Mismatched Memory Management Routines, specifically the use of malloc versus operator delete in the HtmlString class within ImgOutputDev.cc.

Recommendations For PDF2JSON version 0.69, update to a version where the memory management issue in the HtmlString class is resolved, or consider applying a patch that fixes the Mismatched Memory Management Routines if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2018-14946

Produtos afetados

Pdf2Json

Referências · 4

• 🔥 https://github.com/flexpaper/pdf2json/issues/19 · Exploit
• 🔥 https://github.com/fouzhe/security/tree/master/pdf2json#alloc_dealloc_mismatch-in-function-htmlstring · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-14946 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-14946 · Aviso do Fabricante