CVE-2019-14289 - An issue was discovered in Xpdf 4.01.01

Back Back to CVE browser

MEDIUM

An issue was discovered in Xpdf 4.01.01

Published Jul 27, 2019

5.5

MEDIUM

CVSS 3.0

EPSS 0.95%

Description

An issue was discovered in Xpdf 4.01.01. There is an integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "multiple bytes per line" case.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-190

Integer Overflow

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5516
Advisory
https://forum.xpdfreader.com/viewtopic.php?f=3&t=41851
x_refsource_MISCExploitThird Party Advisory
https://github.com/TeamSeri0us/pocs/tree/master/xpdf/4.01.01
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5516		Advisory
https://forum.xpdfreader.com/viewtopic.php?f=3&t=41851		x_refsource_MISCExploitThird Party Advisory
https://github.com/TeamSeri0us/pocs/tree/master/xpdf/4.01.01		x_refsource_MISCExploitThird Party Advisory