The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a specific pdf file, as demonstrated by pdftohtml.
The product writes data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://forum.xpdfreader.com/viewtopic.php?f=3&t=652 | vendor advisory issue tracking |