CVE-2019-13287
First published: Thu Jul 04 2019(Updated: )
In Xpdf 4.01.01, there is an out-of-bounds read vulnerability in the function SplashXPath::strokeAdjust() located at splash/SplashXPath.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure. This is related to CVE-2018-16368.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Glyphandcog Xpdfreader | =4.01.01 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Xpdf vulnerability?
The vulnerability ID for this Xpdf vulnerability is CVE-2019-13287.
What is the severity of CVE-2019-13287?
The severity of CVE-2019-13287 is medium, with a severity value of 5.5.
What is the affected software for CVE-2019-13287?
The affected software for CVE-2019-13287 is Glyphandcog Xpdfreader version 4.01.01.
What is the risk associated with CVE-2019-13287?
CVE-2019-13287 may allow an attacker to cause information disclosure.
How can I fix CVE-2019-13287?
To fix CVE-2019-13287, it is recommended to update to a patched version of Glyphandcog Xpdfreader.
- collector/nvd-index
- agent/weakness
- vendor/glyphandcog
- canonical/glyphandcog xpdfreader
- version/glyphandcog xpdfreader/4.01.01