CVE-2018-7173 (NVD)

2018-02-15

A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding.

Products Xpdf
Type Encoding Error (CWE-172)
First patch - None (likely due to unavailable code)
Links https://forum.xpdfreader.com/viewtopic.php?f=3&t=607