Medium severity5.5NVD Advisory· Published Jul 4, 2019· Updated Jun 17, 2026
CVE-2019-13288
CVE-2019-13288
Description
In Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646.
Affected products
3- cpe:2.3:a:glyphandcog:xpdfreader:4.01.01:*:*:*:*:*:*:*
- Xpdf/Xpdfdescription
Patches
Vulnerability mechanics
References
1- github.com/PanguL4b/pocs/tree/master/xpdf/stack-overflow_dos_Parser__getObjnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.