iTextPDF iText 7.1.17

CPE Details

iTextPDF iText 7.1.17
itextpdf
itext
7.1.17
2022-02-02
15h31 +00:00
2022-02-02
15h39 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:itextpdf:itext:7.1.17:*:*:*:*:*:*:*

Informations

Vendor

itextpdf

Product

itext

Version

7.1.17

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-24196 2022-01-31 23h00 +00:00 iText v7.1.17, up to (exluding)": 7.1.18 and 7.2.2 was discovered to contain an out-of-memory error via the component readStreamBytesRaw, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
6.5
Medium
CVE-2022-24197 2022-01-31 23h00 +00:00 iText v7.1.17 was discovered to contain a stack-based buffer overflow via the component ByteBuffer.append, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
6.5
Medium
CVE-2022-24198 2022-01-31 23h00 +00:00 iText v7.1.17 was discovered to contain an out-of-bounds exception via the component ARCFOUREncryption.encryptARCFOUR, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. NOTE: Vendor does not view this as a vulnerability and has not found it to be exploitable.
6.5
Medium