Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多个产品PDF解析器'fofi/FoFiType1.cc'输入验证漏洞
Vulnerability Description
xpdf 3.02pl5之前版本，poppler 0.8.7及0.15.1之前的其他版本，kdegraphics及其他产品中的PDF解析器中的fofi/FoFiType1.cc文件中的FoFiType1::parse函数存在输入验证漏洞。上下文攻击者可以借助包含负数组索引的特制Type1字体的PDF文件导致拒绝服务(崩溃)并有可能执行任意代码。该漏洞可以绕过输入校验并触发内存破坏。
CVSS Information
N/A
Vulnerability Type
N/A