CVE-2018-18650: Integer Overflow

Published Oct 25, 2018

Updated

An issue was discovered in Xpdf 4.00. XRef::readXRefStream in XRef.cc allows attackers to launch a denial of service (Integer Overflow) via a crafted /Size value in a pdf file, as demonstrated by pdftohtml. This is mainly caused by the program attempting a malloc operation for a large amount of memory.

Affected Software

1 affected component

Xpdfreader Xpdf=4.00

Event History

Oct 25, 2018

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

Description

Frequently Asked Questions

What is CVE-2018-18650?

CVE-2018-18650 is a vulnerability discovered in Xpdf 4.00 that allows attackers to launch a denial of service attack via a crafted /Size value in a PDF file.

How does CVE-2018-18650 affect Xpdf 4.00?

CVE-2018-18650 affects Xpdf 4.00 by causing a denial of service (Integer Overflow) through a specially crafted PDF file.

What is the severity of CVE-2018-18650?

The severity of CVE-2018-18650 is medium with a CVSS score of 5.5.

What software is affected by CVE-2018-18650?

Xpdf 4.00 is affected by CVE-2018-18650.

How can I fix CVE-2018-18650?

To fix CVE-2018-18650, it is recommended to update to a version of Xpdf that is not affected by the vulnerability.