Xpdf Out-of-Bounds Write Vulnerability Due to Integer Overflow in PostScript Function Interpreter

A vulnerability allowing out-of-bounds array writes has been identified in Xpdf versions through 4.05. This issue arises from improper integer overflow checks in the PostScript function interpreter, which could potentially be exploited to write data outside the bounds of allocated arrays.

Impact

Exploitation of this vulnerability could lead to memory corruption, allowing for arbitrary code execution or causing a denial-of-service condition.

Remediation

Users can upgrade to Xpdf version 4.06 to address this vulnerability.