CVE:CVE-2020-20740
CNNVD:CNNVD-202011-1765
PDFResurrect是一款用于从PDF文档中提取或清理版本数据的工具。
PDFResurrect 0.20之前版本存在缓冲区错误漏洞，该漏洞源于在pdf get version()中，缺少头验证检查会导致堆缓冲区溢出。
solution:Upgrade pdfresurrect_project pdfresurrect to a higher version than 0.20,and avoid the version (,0.20); Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 32,33,and avoid the version 32,33