CVE-2019-13283 is a heap-based buffer over-read vulnerability in Xpdf 4.01.01, specifically affecting the strncpy function in fofi/FoFiType1.cc. This flaw can be triggered by processing a crafted PDF document, for instance, via the pdftotext tool, and impacts products like fedoraproject fedora and glyphandcog xpdfreader. With a CVSS score of 7.8 (High), it presents a significant risk, allowing for Denial of Service, information disclosure, or other unspecified impacts through a low-complexity attack requiring user interaction (e.g., opening a malicious PDF). There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or notable community discussion or media coverage surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
4.01.01CPE matchmatch criteria | cpe:2.3:a:glyphandcog:xpdfreader:4.01.01:*:*:*:*:*:*:* | ||
29CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:* | ||
30CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* | ||
31CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.