CVE-2018-11033: Buffer Overflow
Published May 14, 2018
·Updated
The DCTStream::readHuffSym function in Stream.cc in the DCT decoder in xpdf before 4.00 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JPEG data.
Affected Software
1 affected component
Xpdfreader Xpdf=4.00
Event History
May 14, 2018
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-11033?
CVE-2018-11033 has a severity rating that indicates it can lead to denial of service attacks, causing the application to crash.
2
How do I fix CVE-2018-11033?
To fix CVE-2018-11033, upgrade to xpdf version 4.00 or later to address the vulnerability.
3
What are the impacts of exploiting CVE-2018-11033?
Exploiting CVE-2018-11033 can result in application crashes or potentially unspecified impacts due to crafted JPEG data.
4
Which versions of xpdf are affected by CVE-2018-11033?
CVE-2018-11033 affects xpdf versions prior to 4.00.
5
Is CVE-2018-11033 a client-side or server-side vulnerability?
CVE-2018-11033 is primarily a client-side vulnerability affecting applications that use the affected xpdf libraries.