CVE-2024-3248lowCWE-674

CVE-2024-3248: falha de baixa gravidade em Xpdf

Stack overflow in Xpdf 4.05 due to object loop in attachments

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Xpdf

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 2.9epss 0.3%
In Xpdf 4.05 (and earlier), a PDF object loop in the attachments leads to infinite recursion and a stack overflow.
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Produtos afetados
Xpdf · Xpdf
CVEs relacionadas — Xpdf

No mesmo produto, das mais perigosas para as menos.

CVE-2023-2663LOWStack overflow in Xpdf 4.04 due to object loop in PDF page label treeEPSS 0.5%CVE-2024-7868LOWUninitialized variable in Xpdf 4.05 due to invalid JPEG headerEPSS 0.4%CVE-2023-3044LOWDivide-by-zero in Xpdf 4.04 due to very large page sizeEPSS 0.3%CVE-2023-2664LOWStack overflow in Xpdf 4.04 due to object loop in PDF embedded file treeEPSS 0.3%CVE-2024-3247LOWStack overflow in Xpdf 4.05 due to object loop in PDF object streamEPSS 0.3%CVE-2023-2662LOWDivide-by-zero in Xpdf 4.04 due to bad color space objectEPSS 0.3%