CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 1CVE-2020-20740
https://notcve.org/view.php?id=CVE-2020-20740
PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdf_get_version(). PDFResurrect versiones anteriores a 0,20, una falta de comprobaciones de la validación del encabezado causa un desbordamiento del búfer en la región heap de la memoria en la función pdf_get_version() • https://github.com/enferex/pdfresurrect/commit/1b422459f07353adce2878806d5247d9e91fb397 https://github.com/enferex/pdfresurrect/issues/14 https://lists.debian.org/debian-lts-announce/2020/12/msg00002.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEEEPBBGER5LPABBRVZLMCC6Z24RBXW https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZOIEVFM3SIMAEOFJKKMYH2TLZ7PXLSUD • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 1CVE-2020-9549
https://notcve.org/view.php?id=CVE-2020-9549
In PDFResurrect 0.12 through 0.19, get_type in pdf.c has an out-of-bounds write via a crafted PDF document. En PDFResurrect versiones 0.12 hasta 0.19, en la función get_type en el archivo pdf.c presenta una escritura fuera de límites por medio de un documento PDF diseñado. • https://github.com/enferex/pdfresurrect/issues/8 https://lists.debian.org/debian-lts-announce/2020/03/msg00007.html • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0CVE-2019-14934
https://notcve.org/view.php?id=CVE-2019-14934
An issue was discovered in PDFResurrect before 0.18. pdf_load_pages_kids in pdf.c doesn't validate a certain size value, which leads to a malloc failure and out-of-bounds write. Se detectó un problema en PDFResurrect anterior a versión 0.18. La función pdf_load_pages_kids en el archivo pdf.c no comprueba un cierto valor de tamaño, lo que conlleva a un error de malloc y a una escritura fuera de límites. • https://github.com/enferex/pdfresurrect/commit/0c4120fffa3dffe97b95c486a120eded82afe8a6 https://github.com/enferex/pdfresurrect/compare/v0.17...v0.18 https://lists.debian.org/debian-lts-announce/2020/12/msg00002.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DBYXYU2VSDJ3NAL54IW2KYD3TZSR33M https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LXN6W5QTNQJ2LFDCQWKYSMMZ3NPUWP3U https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 2CVE-2019-14267 – pdfresurrect 0.15 - Buffer Overflow
https://notcve.org/view.php?id=CVE-2019-14267
PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is mishandled. PDFResurrect versión 0.15, presenta un desbordamiento de búfer por medio de un archivo PDF especialmente diseñado debido a que los datos asociados con startxref y %%EOF se manejan inapropiadamente. pdfresurrect version 0.15 suffers from a buffer overflow vulnerability. • https://www.exploit-db.com/exploits/47178 http://packetstormsecurity.com/files/153767/pdfresurrect-0.15-Buffer-Overflow.html https://github.com/enferex/pdfresurrect/commits/master https://github.com/snappyJack/pdfresurrect_CVE-2019-14267 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DBYXYU2VSDJ3NAL54IW2KYD3TZSR33M https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LXN6W5QTNQJ2LFDCQWKYSMMZ3NPUWP3U https://lists.fedoraproject.org/archives/list/pa • CWE-787: Out-of-bounds Write •