medium5.5
CVE-2019-13288
In Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file.
Impact
In Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Glyphandcog | Xpdfreader | Version 4.01.01 |