Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2021-40226: May be new stack-overflow bugs in pdftopng of xpdf4.03

xpdfreader 4.03 is vulnerable to Buffer Overflow.

CVE
#pdf#buffer_overflow

minipython

Posts: 7

Joined: Tue Aug 17, 2021 3:35 am

May be new stack-overflow bugs in pdftopng of xpdf4.03

English is not my native language,please excuse typing errors.
Here are some error messages in gdb.

Code: Select all

Syntax Error (3302): Inline image dictionary key must be a name object
Syntax Error (3302): Inline image dictionary key must be a name object
Syntax Error (3302): Inline image dictionary key must be a name object
Syntax Error (3302): Inline image dictionary key must be a name object

.

Code: Select all

Syntax Error (2922): Illegal character <6e> in hex string
Syntax Error (2923): Illegal character <25> in hex string
Syntax Error (2924): Illegal character <50> in hex string
Syntax Error (2927): Illegal character <2d> in hex string
Syntax Error (2929): Illegal character <2e> in hex string
Syntax Error (2938): Illegal character <6f> in hex string

In my attachements,i add a zip include gdb info,asan info and trigger crash files.

Attachments

pdftopng_information.zip

(11.09 KiB) Downloaded 223 times

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda