CVE-2020-20740 – PDFResurrect before 0.20 lack of header validation checks causes heap-buf

PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdf_get_version().

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20740

Reference (s):

• FEDORA:FEDORA-2020-92195be0e2
• URL: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZOIEVFM3SIMAEOFJKKMYH2TLZ7PXLSUD/
• FEDORA:FEDORA-2020-e9f9bb77a0
• URL: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEEEPBBGER5LPABBRVZLMCC6Z24RBXW/
• https://github.com/enferex/pdfresurrect/commit/1b422459f07353adce2878806d5247d9e91fb397