CVE-2024-4976
Assigner: GandC
Published: 2024-05-15T20:34:24.716Z
State: PUBLISHED
affected: defaultStatus: unaffected
platforms: all
product: Xpdf
vendor: Xpdf
versions: lessThanOrEqual: 4.05
status: affected
version: 0
versionType: version
credits: type: finder
value: Vladislav Shevchenko (HSE university, Moscow)
descriptions: supportingMedia: base64: no
type: text/html
value: Out-of-bounds array write in Xpdf 4.05 and earlier, due to missing object type check in AcroForm field reference.<br>
value: Out-of-bounds array write in Xpdf 4.05 and earlier, due to missing object type check in AcroForm field reference.
metrics: cvssV4_0: Automatable: NOT_DEFINED
Recovery: NOT_DEFINED
Safety: NOT_DEFINED
attackComplexity: HIGH
attackRequirements: NONE
attackVector: LOCAL
baseScore: 2.1
baseSeverity: LOW
privilegesRequired: NONE
providerUrgency: NOT_DEFINED
subAvailabilityImpact: LOW
subConfidentialityImpact: NONE
subIntegrityImpact: NONE
userInteraction: NONE
valueDensity: NOT_DEFINED
vectorString: CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L
version: 4.0
vulnAvailabilityImpact: LOW
vulnConfidentialityImpact: NONE
vulnIntegrityImpact: NONE
vulnerabilityResponseEffort: NOT_DEFINED
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-787
description: CWE-787 Out-of-bounds Write
type: CWE
source: discovery: UNKNOWN
title: Out-of-bounds array write in Xpdf 4.05 due to missing object type check
x_generator: engine: Vulnogram 0.2.0