CVE-2020-24999

There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2

published September 3, 2020

CVSS
—
EPSS
1%
Percentile
64.2
In the wild
Unconfirmed
What it is

There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2. It can be triggered by sending a crafted PDF file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01055 · 64.2th percentile
Published
2020-09-03T22:17Z
EPSS history
Timeline
  • 03 SEP 22:17Z
    There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2
    cvelistv5