CVE-2020-9549: High severity Pdfresurrect Project Pdfresurrect vulnerability
Published Mar 2, 2020
·Updated
In PDFResurrect 0.12 through 0.19, gettype in pdf.c has an out-of-bounds write via a crafted PDF document.
Affected Software
2 affected components
Pdfresurrect Project Pdfresurrect>=0.12<=0.19
Debian Debian Linux=8.0
Event History
Mar 2, 2020
CVE Published
via MITRE·04:32 AM
Data Sourced
via MITRE·04:32 AM
Description
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-9549?
CVE-2020-9549 has been classified as a medium severity vulnerability due to the potential for out-of-bounds writes that can lead to arbitrary code execution.
2
How do I fix CVE-2020-9549?
To fix CVE-2020-9549, upgrade to PDFResurrect version 0.20 or later, which addresses the out-of-bounds write issue.
3
Which versions of PDFResurrect are affected by CVE-2020-9549?
PDFResurrect versions 0.12 through 0.19 are affected by CVE-2020-9549.
4
Is Debian Linux 8.0 impacted by CVE-2020-9549?
Yes, Debian Linux 8.0 is impacted by CVE-2020-9549 due to the presence of the vulnerable PDFResurrect versions.
5
What can happen if CVE-2020-9549 is exploited?
If exploited, CVE-2020-9549 can result in an attacker executing arbitrary code on the affected system.