Products
Poppler
Source
secalert@redhat.com
Tags
CVE-2024-6239 details
Published : June 21, 2024, 2:15 p.m.
Last Modified : June 21, 2024, 3:58 p.m.
Last Modified : June 21, 2024, 3:58 p.m.
Description
A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, an attacker could cause the utility to crash, leading to a denial of service.
CVSS Score
1 | 2 | 3 | 4 | 5 | 6.5 | 7 | 8 | 9 | 10 |
---|
Weakness
Weakness | Name | Description |
---|---|---|
CWE-20 | Improper Input Validation | The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. |
CVSS Data
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Base Score
6.5
Exploitability Score
2.8
Impact Score
3.6
Base Severity
MEDIUM
Vector String : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References
URL | Source |
---|---|
https://access.redhat.com/security/cve/CVE-2024-6239 | secalert@redhat.com |
https://bugzilla.redhat.com/show_bug.cgi?id=2293594 | secalert@redhat.com |
This website uses the NVD API, but is not approved or certified by it.