CVE-2019-9589: Null Pointer Dereference

Published Mar 6, 2019

Updated

There is a NULL pointer dereference vulnerability in PSOutputDev::setupResources() located in PSOutputDev.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.

Affected Software

1 affected component

Glyphandcog Xpdfreader=4.01

Event History

Mar 6, 2019

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Data Sourced

via NVD·08:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-9589?

CVE-2019-9589 has a medium severity rating due to its potential to cause Denial of Service.

How do I fix CVE-2019-9589?

To fix CVE-2019-9589, upgrade to the latest version of Xpdf that addresses the NULL pointer dereference vulnerability.

What is the impact of exploiting CVE-2019-9589?

Exploiting CVE-2019-9589 can result in a segmentation fault leading to a Denial of Service.

Who is affected by CVE-2019-9589?

CVE-2019-9589 affects users of Xpdf version 4.01.

Can CVE-2019-9589 be exploited remotely?

Yes, CVE-2019-9589 can be exploited remotely by sending a crafted PDF file to the application.