ByteOS Network

NVD Vulnerability Details :

CVE-2019-12360

Modified

Source-cve@mitre.org

Published At-27 May, 2019 | 23:29

Updated At-07 Nov, 2023 | 03:03

A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf 4.01.01. It can, for example, be triggered by sending crafted TrueType data in a PDF document to the pdftops tool. It might allow an attacker to cause Denial of Service or leak memory data into dump content.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.1	HIGH	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Primary	2.0	5.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:P

CPE Matches

glyphandcog>>xpdfreader>>4.01.01

cpe:2.3:a:glyphandcog:xpdfreader:4.01.01:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-125	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://forum.xpdfreader.com/viewtopic.php?f=3&t=41801	cve@mitre.org	Vendor Advisory
https://lists.debian.org/debian-lts-announce/2019/06/msg00002.html	cve@mitre.org	N/A
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EJ3GYFINXANXTQEDN5SON47IJA5277RU/	cve@mitre.org	N/A
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IQBAHQQF2P7E6PL5STST3TGH7VPVXKKQ/	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History