CVE-2018-8100

CWE-787 — Out-of-bounds Write8 documents6 sources

Severity

7.8HIGH

EPSS

0.2%

top 55.32%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Xpdfreader Xpdf

Timeline

PublishedMar 14

Latest updateMay 13

Description

The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a specific pdf file, as demonstrated by pdftohtml.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

▶NVDxpdfreader/xpdf4.00

🔴Vulnerability Details

GHSA

GHSA-mpq7-8p6c-8w2f: The JPXStream::readTilePart function in JPXStream↗2022-05-13

▶

OSV

CVE-2018-8100: The JPXStream::readTilePart function in JPXStream↗2018-03-14

▶

CVEList

CVE-2018-8100: The JPXStream::readTilePart function in JPXStream↗2018-03-14

▶

📋Vendor Advisories

Debian

CVE-2018-8100: xpdf - The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allows attacke...↗2018

▶

💬Community

Bugzilla

CVE-2018-8100 CVE-2018-8101 CVE-2018-8102 CVE-2018-8103 CVE-2018-8104 CVE-2018-8105 CVE-2018-8106 CVE-2018-8107 xpdf: Multiple buffer overflow vulnerabilities↗2018-03-21

▶

Bugzilla

CVE-2018-8100 CVE-2018-8101 CVE-2018-8102 CVE-2018-8103 CVE-2018-8104 CVE-2018-8105 CVE-2018-8106 CVE-2018-8107 xpdf: Multiple buffer overflow problems [fedora-all]↗2018-03-21

▶

Bugzilla

CVE-2018-8100 CVE-2018-8101 CVE-2018-8102 CVE-2018-8103 CVE-2018-8104 CVE-2018-8105 CVE-2018-8106 CVE-2018-8107 xpdf: Multiple buffer overflow problems [epel-all]↗2018-03-21

▶