VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Feb 15, 2018· Updated Jun 17, 2026

CVE-2018-7173

CVE-2018-7173

Description

A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding.

Affected products

2
  • Xpdf/Xpdf2 versions
    cpe:2.3:a:xpdfreader:xpdf:4.00:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:xpdfreader:xpdf:4.00:*:*:*:*:*:*:*
    • (no CPE)range: =4.00

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.