Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Pdfresurrect Project records in CISA KEVNo Pdfresurrect Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 44
PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is mishandled.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.07052 · Published 2019-07-29 · No fix listed CWE-787
Priority LOW 37
In PDFResurrect 0.12 through 0.19, get_type in pdf.c has an out-of-bounds write via a crafted PDF document.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01383 · Published 2020-03-02 · No fix listed CWE-787
Priority LOW 36
PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdf_get_version().
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01185 · Published 2020-11-20 · No fix listed CWE-787
Priority LOW 36
An issue was discovered in PDFResurrect before 0.18.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01118 · Published 2019-08-11 · No fix listed CWE-787
Priority LOW 26
A flaw was found in PDFResurrect in version 0.22b.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00693 · Published 2021-04-28 · No fix listed CWE-835
Open these records in search →