PT-2019-13876 · Pdfresurrect+2 · Pdfresurrect+2
Rtfingc
·
Publicado
2019-08-11
·
Atualizado
2023-03-02
·
CVE-2019-14934
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PDFResurrect versions prior to 0.18
Description
An issue was discovered in PDFResurrect where the
pdf load pages kids function in pdf.c does not validate a certain size value. This leads to a malloc failure and an out-of-bounds write.Recommendations
For versions prior to 0.18, update to version 0.18 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
pdf load pages kids function until a patch is available.Correção
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linuxmint
Pdfresurrect
Ubuntu