CVE-2023-3436lowCWE-833

CVE-2023-3436: falha de baixa gravidade em Xpdf

Deadlock in Xpdf 4.04 due to PDF object stream references

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Xpdf

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.3epss 0.2%
Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Produtos afetados
Xpdf · Xpdf
CVEs relacionadas — Xpdf

No mesmo produto, das mais perigosas para as menos.

CVE-2023-2663LOWStack overflow in Xpdf 4.04 due to object loop in PDF page label treeEPSS 0.5%CVE-2024-7868LOWUninitialized variable in Xpdf 4.05 due to invalid JPEG headerEPSS 0.4%CVE-2023-3044LOWDivide-by-zero in Xpdf 4.04 due to very large page sizeEPSS 0.3%CVE-2023-2664LOWStack overflow in Xpdf 4.04 due to object loop in PDF embedded file treeEPSS 0.3%CVE-2024-3248LOWStack overflow in Xpdf 4.05 due to object loop in attachmentsEPSS 0.3%CVE-2024-3247LOWStack overflow in Xpdf 4.05 due to object loop in PDF object streamEPSS 0.3%