Vulnerability Details CVE-2022-33108
XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.9%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
References
- https://forum.xpdfreader.com/viewtopic.php?f=3&t=42284
- https://forum.xpdfreader.com/viewtopic.php?f=3&t=42286
- https://forum.xpdfreader.com/viewtopic.php?f=3&t=42287
- https://forum.xpdfreader.com/viewtopic.php?f=3&t=42284
- https://forum.xpdfreader.com/viewtopic.php?f=3&t=42286
- https://forum.xpdfreader.com/viewtopic.php?f=3&t=42287
Products affected by CVE-2022-33108
-
cpe:2.3:a:xpdfreader:xpdf:4.04