CVE-2019-9878: High severity pdfalto vulnerability
There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-9878?
CVE-2019-9878 is a vulnerability in Xpdf 4.0.0 and pdfalto 0.2 that allows an attacker to cause a denial of service by triggering an invalid memory access in the GfxIndexedColorSpace::mapColorToBase() function.
What is the severity of CVE-2019-9878?
The severity of CVE-2019-9878 is high with a CVSS score of 7.8.
How can CVE-2019-9878 be triggered?
CVE-2019-9878 can be triggered by sending a crafted PDF file to the pdftops binary.
What is the affected software?
The affected software for CVE-2019-9878 is Xpdf 4.0.0 and pdfalto 0.2.
Is there a fix for CVE-2019-9878?
There may be updates or patches available for Xpdf 4.0.0 and pdfalto 0.2 to address CVE-2019-9878, it is recommended to check the vendor's website or official sources for more information.