Vulnerability Details CVE-2020-20740
PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdf_get_version().
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.1%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
References
- https://github.com/enferex/pdfresurrect/commit/1b422459f07353adce2878806d5247d9e91fb397
- https://github.com/enferex/pdfresurrect/issues/14
- https://lists.debian.org/debian-lts-announce/2020/12/msg00002.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEEEPBBGER5LPABBRVZLMCC6Z24RBXW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZOIEVFM3SIMAEOFJKKMYH2TLZ7PXLSUD/
- https://github.com/enferex/pdfresurrect/commit/1b422459f07353adce2878806d5247d9e91fb397
- https://github.com/enferex/pdfresurrect/issues/14
- https://lists.debian.org/debian-lts-announce/2020/12/msg00002.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEEEPBBGER5LPABBRVZLMCC6Z24RBXW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZOIEVFM3SIMAEOFJKKMYH2TLZ7PXLSUD/
Products affected by CVE-2020-20740
-
cpe:2.3:a:pdfresurrect_project:pdfresurrect:0.12
-
cpe:2.3:a:pdfresurrect_project:pdfresurrect:0.13
-
cpe:2.3:a:pdfresurrect_project:pdfresurrect:0.14
-
cpe:2.3:a:pdfresurrect_project:pdfresurrect:0.15
-
cpe:2.3:a:pdfresurrect_project:pdfresurrect:0.16
-
cpe:2.3:a:pdfresurrect_project:pdfresurrect:0.17
-
cpe:2.3:a:pdfresurrect_project:pdfresurrect:0.18
-
cpe:2.3:a:pdfresurrect_project:pdfresurrect:0.19
-
cpe:2.3:o:debian:debian_linux:9.0
-
cpe:2.3:o:fedoraproject:fedora:32
-
cpe:2.3:o:fedoraproject:fedora:33