Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a crafted Type 1 font that can produce a negative value, leading to a signed-to-unsigned integer conversion error and a buffer overflow.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Xpdf 'FoFiType1.cc' FoFiType1::parse函数栈溢出漏洞
Vulnerability Description
Xpdf是便携文档格式(PDF)文件的开放源码查看器。 Xpdf的xpdf/fofi/FoFiType1.cc文件中的FoFiType1::parse()函数存在栈溢出漏洞： 133 void FoFiType1::parse() { 因此没有定义(line1 - line)，可能生成负值n，该值之后传送给了strncpy，溢出buf缓冲区。
CVSS Information
N/A
Vulnerability Type
N/A