Vulnerability CVE-2022-33108: Information

Description

XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2022-33108

Published: June 28, 2022

Modified: July 8, 2022

Error type identifier: CWE-787

Fixed packages

Package name	Branch	Fixed in version	Version from repository	Errata ID	Task #	State
xpdf	sisyphus	4.05-alt1	4.05-alt1	ALT-PU-2024-7465-3	347491	Fixed
xpdf	sisyphus_e2k	4.05-alt1	4.05-alt1	ALT-PU-2024-7502-1	-	Fixed
xpdf	sisyphus_riscv64	4.05-alt1	4.05-alt1	ALT-PU-2024-7493-1	-	Fixed
xpdf	sisyphus_loongarch64	4.05-alt1	4.05-alt1	ALT-PU-2024-7487-1	-	Fixed
xpdf	p10	4.05-alt1	4.04-alt1	ALT-PU-2024-7467-2	347494	Testing

Hyperlink	Resource
https://forum.xpdfreader.com/viewtopic.php?f=3&t=42284	Exploit Issue Tracking Third Party Advisory
https://forum.xpdfreader.com/viewtopic.php?f=3&t=42286	Exploit Issue Tracking Third Party Advisory
https://forum.xpdfreader.com/viewtopic.php?f=3&t=42287	Exploit Issue Tracking Third Party Advisory

Affected configurations:
1. Configuration 1
  cpe:2.3:a:xpdfreader:xpdf:4.04:*:*:*:*:*:*:*

Version: v24.5.1