medium5.5
CVE-2017-9209
libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to …
Impact
libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to QPDFObjectHandle::parseInternal, aka qpdf-infiniteloop2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qpdf Project | Qpdf | Version 6.0.0 |
| Canonical | Ubuntu Linux | Versions 14.04, 16.04, 17.10 |