CVE-2019-13288 - In Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file

Back Back to CVE browser

MEDIUM

In Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file

Published Jul 4, 2019

5.5

MEDIUM

CVSS 3.0

EPSS 4.56%

Description

In Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-674

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4794
Advisory
https://github.com/PanguL4b/pocs/tree/master/xpdf/stack-overflow_dos_Parser__getObj
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4794		Advisory
https://github.com/PanguL4b/pocs/tree/master/xpdf/stack-overflow_dos_Parser__getObj		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 4, 2019

Updated Aug 4, 2024

Reserved Jul 4, 2019

Link CVE-2019-13288

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-13288

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jul 4, 2019

Updated Aug 4, 2024

Link EUVD-2019-4794

GitHub

No data