CVE-2019-9588: Buffer Overflow
Published Mar 6, 2019
·Updated
There is an Invalid memory access in gAtomicIncrement() located at GMutex.h in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Affected Software
1 affected component
Glyphandcog Xpdfreader=4.01
Event History
Mar 6, 2019
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Data Sourced
via NVD·08:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-9588?
CVE-2019-9588 has a high severity rating due to the potential for Denial of Service attacks.
2
How do I fix CVE-2019-9588?
To fix CVE-2019-9588, ensure you update XpdfReader to a patched version beyond 4.01.
3
What can be affected by CVE-2019-9588?
CVE-2019-9588 specifically affects XpdfReader version 4.01 and could lead to application crashes.
4
What type of vulnerability is CVE-2019-9588?
CVE-2019-9588 is characterized as an Invalid memory access vulnerability.
5
Can CVE-2019-9588 be exploited remotely?
Yes, CVE-2019-9588 can be exploited remotely by sending a crafted PDF file to the affected application.