CVE-2018-18454: Medium severity xpdf vulnerability

Published Oct 18, 2018

Updated

CCITTFaxStream::readRow() in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm.

Affected Software

1 affected component

Xpdfreader Xpdf=4.00

Event History

Oct 18, 2018

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2018-18454.

What is the severity of CVE-2018-18454?

The severity of CVE-2018-18454 is medium with a severity value of 5.5.

How does CVE-2018-18454 affect Xpdf 4.00?

CVE-2018-18454 affects Xpdf 4.00 by allowing remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm.

How can I fix CVE-2018-18454?

To fix CVE-2018-18454, update Xpdf to a version that has addressed the vulnerability.

Where can I find more information about CVE-2018-18454?

You can find more information about CVE-2018-18454 in the following references: [link1](https://forum.xpdfreader.com/viewtopic.php?f=3&t=41217), [link2](https://github.com/TeamSeri0us/pocs/tree/master/xpdf/2018_10_16/pdftoppm).