Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2022-30524 PoC — Xpdf 缓冲区错误漏洞

Source
Associated Vulnerability
Title:Xpdf 缓冲区错误漏洞 (CVE-2022-30524)
Description:Xpdf是FOO实验室的一款开源的PDF阅读器。该产品支持解码LZW压缩格式的文件以及阅读加密的PDF文件。 Xpdf 4.0.4版本存在安全漏洞,该漏洞源于TextOutputDev.cc的TextLine类中存在无效的内存访问。攻击者利用该漏洞把特制的pdf文件发送到pdftotext二进制文件,从而导致拒绝服务(分段错误)或其他影响。
Description
Docker images of Xpdf 4.04, vulnerable to CVE-2022-30524
Readme
# Xpdf Docker Images

This repository contains docker images for [Xpdf](https://www.xpdfreader.com/)
version 4.04, which is vulnerable to [CVE-2022-30524](https://nvd.nist.gov/vuln/detail/CVE-2022-30524).

## Building the Images 📦

This repository contains the image in 3 flavours:

- **bullseye/gcc**: Debian "bullseye", built with gcc
- **bullseye/afl**: Debian "bullseye", built with afl-clang-fast++ (debug profile)
- **focal/afl**: Ubuntu 20.04 LTS (Focal Fossa), built with afl-clang-fast++
  (debug profile)

Flavours that are just aliases to other flavours:

- **bullseye** → **bullseye/gcc**

Their `Dockerfile` are present in their respective directories in [dockerfiles/](dockerfiles)
directory.

The repository is packaged with a [`Makefile`](Makefile) for easier building of
the images. To build any image, run the following command:

```shell
make '<flavor-name>'

# Eg. if building the focal/afl profile
make focal/afl

# If you want to build all the images
make
```

This will generate a Docker image `interiit/xpdf:4.04-<flavor>`. Running just
`make` builds all the images.

## Checking Integrity 🔍

The repository contains the vulnerable version of Xpdf, as well as a few sample
PDF files. The `pdftotext` binary should work on [pdfs/dummy.pdf](pdfs/dummy.pdf),
but should abruptly give segmentation fault on [pdfs/poc1](pdfs/poc1).

To make sure that the files are not corrupted/altered, run `make check`. If the
command errors, it might mean that the files may be corrupted.
File Snapshot

[4.0K] /data/pocs/00e639f1d610fe793b652463cee2900876d5312a ├── [4.0K] dockerfiles │   ├── [4.0K] bullseye │   │   ├── [4.0K] afl │   │   │   └── [2.2K] Dockerfile │   │   ├── [ 14] Dockerfile -> gcc/Dockerfile │   │   └── [4.0K] gcc │   │   └── [2.2K] Dockerfile │   └── [4.0K] focal │   └── [4.0K] afl │   └── [2.2K] Dockerfile ├── [ 11K] LICENSE ├── [ 824] Makefile ├── [ 353] NOTICE ├── [4.0K] pdfs │   ├── [ 13K] dummy.pdf │   └── [2.9K] poc1 ├── [1.5K] README.md ├── [ 240] sha256sums.txt └── [947K] xpdf-4.04.tar.gz 7 directories, 12 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.