You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@pdfbox.apache.org by "Andreas Lehmkühler (JIRA)" <ji...@apache.org> on 2018/06/29 06:15:00 UTC
[jira] [Commented] (PDFBOX-4251) Optimize AFMParser
[ https://issues.apache.org/jira/browse/PDFBOX-4251?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16527233#comment-16527233 ]
Andreas Lehmkühler commented on PDFBOX-4251:
--------------------------------------------
The following are the related changes:
http://svn.apache.org/viewvc/pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/afm/AFMParser.java?rev=1834048&r1=1834047&r2=1834048&view=diff
http://svn.apache.org/viewvc/pdfbox/branches/2.0/fontbox/src/main/java/org/apache/fontbox/afm/AFMParser.java?rev=1834046&r1=1834045&r2=1834046&view=diff
http://svn.apache.org/viewvc/pdfbox/branches/1.8/fontbox/src/main/java/org/apache/fontbox/afm/AFMParser.java?rev=1834047&r1=1834046&r2=1834047&view=diff
> Optimize AFMParser
> ------------------
>
> Key: PDFBOX-4251
> URL: https://issues.apache.org/jira/browse/PDFBOX-4251
> Project: PDFBox
> Issue Type: Improvement
> Components: FontBox
> Affects Versions: 1.8.14, 2.0.10, 3.0.0 PDFBox
> Reporter: Andreas Lehmkühler
> Assignee: Andreas Lehmkühler
> Priority: Major
> Labels: CVE-2018-8036
> Fix For: 1.8.15, 2.0.11, 3.0.0 PDFBox
>
>
> From our private mailinlist:
> {quote}
> Tobias Ospelt has been working with fuzzing to identify oom/infinite loops. Tobias' attached file triggers a really long running loop which eventually leads to an OOM. It looks like this loop is the problem in AFMParser's readLine():
> {quote}
>
> {code}
> while(!this.isEOL(nextByte = this.input.read())) {
> buf.append((char)nextByte);
> }
> {code}
> CVE-2018-8036
> Description: A carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser.
> Affected versions:
> <= 1.8.14
> <= 2.0.10
> Mitigation: update to a more recent version
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@pdfbox.apache.org
For additional commands, e-mail: dev-help@pdfbox.apache.org