CVE-2018-8100: Buffer Overflow
Published Mar 14, 2018
·Updated
The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a specific pdf file, as demonstrated by pdftohtml.
Affected Software
1 affected component
Xpdfreader Xpdf=4.00
Event History
Mar 14, 2018
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Data Sourced
via NVD·03:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-8100?
CVE-2018-8100 has been classified as a critical vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2018-8100?
To fix CVE-2018-8100, upgrade Xpdf to a version later than 4.00 where the vulnerability has been addressed.
3
What type of attack does CVE-2018-8100 facilitate?
CVE-2018-8100 facilitates a denial of service attack that may lead to a heap-based buffer overflow.
4
Which software is affected by CVE-2018-8100?
The affected software for CVE-2018-8100 is Xpdf version 4.00.
5
Can CVE-2018-8100 lead to other impacts besides application crash?
Yes, CVE-2018-8100 may also have unspecified other impacts beyond just an application crash.