Security Advisory
CVE-2018-18456
5.5
MEDIUM
Vulnerability Description
The function Object::isName() in Object.h (called from Gfx::opSetFillColorN) in Xpdf 4.00 allows remote attackers to cause a denial of service (stack-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm.
Published Date
October 18, 2018
Official Source
NIST NVD Advisory