Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5) libextractor allows user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with large size values that cause insufficient memory to be allocated.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多家厂商xpdf JPX流阅读器堆溢出漏洞
Vulnerability Description
Xpdf是便携文档格式(PDF)文件的开放源码浏览器。 多家厂商软件版本所捆绑的xpdf中存在堆溢出漏洞。用于解码嵌入JPEG 2000图形的JPX流解析代码没有充分的验证用户输入。xpdf/JPXStream.cc的JPXStream::readCodestream函数中存在基于堆缓冲区溢出漏洞，从PDF文件的用户可控数据读取nXTiles的值，然后在gmallocn()调用中使用nXTiles和nYTiles值，提供给nXTiles和nYTiles的过大值会破坏堆内存，导致拒绝服务或执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A