CVE-2020-23680

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An issue was discovered in function StartPage in text2pdf.c in pdfcorner text2pdf 1.1, allows attackers to cause denial of service or possibly other undisclosed impacts.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.eprg.org/pdfcorner/text2pdf/Product
https://github.com/philips/text2pdf/issues/1Patch, Third Party Advisory
http://www.eprg.org/pdfcorner/text2pdf/Product
https://github.com/philips/text2pdf/issues/1Patch, Third Party Advisory

Timeline

Published: Nov 3, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-236859.8SQL Injection vulnerability in 188Jianzhan v2.1.0, allows attackers to execute arbitrary code and gain escalated privileges, via the usernam CVE-2020-236868.8Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified i CVE-2020-236894.8In YFCMF v2.3.1, there is a stored XSS vulnerability in the comments section of the news page.CVE-2020-236919.8YFCMF v2.3.1 has a Remote Command Execution (RCE) vulnerability in the index.php.CVE-2020-236975.4Cross Site Scripting vulnerabilty in Monstra CMS 3.0.4 via the page feature in admin/index.php.CVE-2020-237004.8Cross Site Scripting (XSS) vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature.CVE-2020-237024.8Cross Site Scripting (XSS) vulnerability in PHP-Fusion 9.03.60 via 'New Shout' in /infusions/shoutbox_panel/shoutbox_admin.php.CVE-2020-237056.5A global buffer overflow vulnerability in jfif_encode at jfif.c:701 of ffjpeg through 2020-06-22 allows attackers to cause a Denial of Servi CVE-2020-237066.5A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_subsequent_scan() ok_jpg.c:1102 of ok-file-formats through 20 CVE-2020-237076.5A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_progressive() at ok_jpg.c:1054 of ok-file-formats through 202 CVE-2020-237105.4Cross Site Scripting (XSS) vulneraiblity in LimeSurvey 4.2.5 on textbox via the Notifications & data feature.CVE-2020-237119.8SQL Injection vulnerability in NavigateCMS 2.9 via the URL encoded GET input category in navigate.php.