CVE-2018-7173 - A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding

Back Back to CVE browser

MEDIUM

A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding

Published Feb 15, 2018

5.5

MEDIUM

CVSS 3.0

EPSS 0.78%

Description

A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-172

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-18915
Advisory
https://forum.xpdfreader.com/viewtopic.php?f=3&t=607
x_refsource_MISCIssue TrackingVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-18915		Advisory
https://forum.xpdfreader.com/viewtopic.php?f=3&t=607		x_refsource_MISCIssue TrackingVendor Advisory