mirror of
https://github.com/0xMarcio/cve.git
synced 2026-04-21 14:06:08 +02:00
817 B
817 B
CVE-2017-11624
Description
A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDFTokenizer::resolveLiteral function in QPDFTokenizer.cc after two consecutive calls to QPDFObjectHandle::parseInternal, aka an "infinite loop."
POC
Reference
Github
No PoCs found on GitHub currently.