Description
In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (application crash) in xpdf-based PDF viewers.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_misc
https://security-tracker.debian.org/tracker/CVE-2010-0207
Issue Tracking, Third Party Advisory x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0207
Scores
CVSS v3
5.5
EPSS
0.0044
EPSS Percentile
63.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-835
Status
published
Products (3)
xpdfreader/xpdf
3.03-17
xpdfreader/xpdf
3.04-4
xpdfreader/xpdf
3.04-13
Published
Oct 30, 2019
Tracked Since
Feb 18, 2026