CVE-2018-25306: PDFunite 0.41.0 Buffer Overflow via Malformed PDF
PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by processing malformed PDF files during merge operations. Attackers can trigger a segmentation fault in the XRef::getEntry function within libpoppler by providing a specially crafted PDF file to the pdfunite utility.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-25306?
CVE-2018-25306 has a medium severity rating due to its impact on application stability when processing malformed PDF files.
How do I fix CVE-2018-25306?
To fix CVE-2018-25306, upgrade to an updated version of Poppler that addresses this vulnerability.
Who is affected by CVE-2018-25306?
CVE-2018-25306 affects users of Poppler pdfunite version 0.41.0 who utilize the application to merge PDF files.
What is the nature of the vulnerability in CVE-2018-25306?
CVE-2018-25306 is a buffer overflow vulnerability that can lead to a segmentation fault when processing malformed PDF files.
Can CVE-2018-25306 be exploited remotely?
CVE-2018-25306 requires local access to the application, as attackers must provide a malformed PDF file to exploit it.