CVE-2020-20740: High severity pdfresurrect vulnerability
Published Nov 20, 2020
·Updated
PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdfgetversion().
Affected Software
4 affected components
Pdfresurrect Project Pdfresurrect<0.20
Debian Debian Linux=9.0
Fedoraproject Fedora=32
Fedoraproject Fedora=33
Remediation
Event History
Nov 20, 2020
CVE Published
via MITRE·06:16 PM
Data Sourced
via MITRE·06:16 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-20740?
CVE-2020-20740 has a high severity rating due to its exploitation potential leading to a heap buffer overflow.
2
How do I fix CVE-2020-20740?
To mitigate CVE-2020-20740, update PDFResurrect to version 0.20 or later to ensure proper header validation checks.
3
What systems are affected by CVE-2020-20740?
CVE-2020-20740 affects versions of PDFResurrect prior to 0.20 and also impacts Debian 9.0 and Fedora versions 32 and 33.
4
Can CVE-2020-20740 be exploited remotely?
Yes, CVE-2020-20740 can potentially be exploited remotely through malicious PDF files.
5
What type of vulnerability is CVE-2020-20740?
CVE-2020-20740 is classified as a heap buffer overflow vulnerability.