Vulnerabilities > CVE-2018-7453 - Infinite Loop vulnerability in Xpdfreader Xpdf 4.00

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
xpdfreader
CWE-835

Summary

Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop checking, as demonstrated by pdftohtml.

Vulnerable Configurations

Part Description Count
Application
Xpdfreader
1