WID-SEC-W-2022-1144

DeutschShown in its original language — a full translation is planned for a future version.

xpdf: Schwachstelle ermöglicht Codeausführung

view advisory published 2022-08-22

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in xpdf ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-38171US	high7.8	0.34% (27th)	—	2022-08-22
Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2…

references

External citations — patches, advisories, analysis.

Red Hat Bugzilla - Bug 2120439 vom 2022-08-22external
Gentoo Linux Security Advisory GLSA-202405-18 vom 2024-05-07external
WID-SEC-W-2022-1144 - CSAF Versionself
WID-SEC-2022-1144 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan