The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote malicious users to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated by pdftoppm.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
xpdfreader xpdf 4.00 |