cve/2023/CVE-2023-2664.md
2024-06-18 02:51:15 +02:00

18 lines
636 B
Markdown
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

### [CVE-2023-2664](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2664)
![](https://img.shields.io/static/v1?label=Product&message=Xpdf&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%204.04%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-674%20Uncontrolled%20Recursion&color=brighgreen)
### Description
 In Xpdf 4.04 (and earlier), a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow.
### POC
#### Reference
- https://forum.xpdfreader.com/viewtopic.php?t=42422
#### Github
No PoCs found on GitHub currently.