Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

foolabs xpdf 3.02pl1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-1552
t1lib 5.1.2 and previous versions, as used in Xpdf prior to 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote malicious users to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulne...
T1lib T1lib 5.0.2T1lib T1lib 5.0.1T1lib T1lib 5.0.0T1lib T1lib 0.7T1lib T1lib 0.8T1lib T1lib 5.1.1T1lib T1lib 5.1.0T1lib T1lib 0.5T1lib T1lib 0.6T1lib T1lib 1.0.1T1lib T1lib 1.1.0T1lib T1lib 0.1T1lib T1lib 0.2T1lib T1lib 0.9T1lib T1lib 0.9.1T1lib T1lib 1.3T1lib T1lib 1.3.1T1lib T1lib 0.3T1lib T1lib 0.4T1lib T1lib 0.9.2T1lib T1lib 1.0T1lib T1lib
NA
CVE-2011-1553
Use-after-free vulnerability in t1lib 5.1.2 and previous versions, as used in Xpdf prior to 3.02pl6, teTeX, and other products, allows remote malicious users to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an inva...
T1lib T1lib 0.1T1lib T1lib 0.2T1lib T1lib 0.9.1T1lib T1lib 0.9.2T1lib T1lib 1.3.1T1lib T1libT1lib T1lib 5.1.0T1lib T1lib 5.0.2T1lib T1lib 0.5T1lib T1lib 0.6T1lib T1lib 1.1.0T1lib T1lib 1.1.1T1lib T1lib 5.0.1T1lib T1lib 5.0.0T1lib T1lib 0.7T1lib T1lib 0.8T1lib T1lib 0.9T1lib T1lib 1.2T1lib T1lib 1.3T1lib T1lib 5.1.1T1lib T1lib 0.3T1lib T1lib 0.4
NA
CVE-2011-1554
Off-by-one error in t1lib 5.1.2 and previous versions, as used in Xpdf prior to 3.02pl6, teTeX, and other products, allows remote malicious users to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory r...
T1lib T1lib 5.0.0T1lib T1lib 0.1T1lib T1lib 0.2T1lib T1lib 0.9T1lib T1lib 0.9.1T1lib T1lib 1.3T1lib T1lib 1.3.1T1lib T1lib 0.3T1lib T1lib 0.4T1lib T1lib 0.9.2T1lib T1lib 1.0T1lib T1libT1lib T1lib 5.0.2T1lib T1lib 5.0.1T1lib T1lib 0.7T1lib T1lib 0.8T1lib T1lib 1.1.1T1lib T1lib 1.2T1lib T1lib 5.1.1T1lib T1lib 5.1.0T1lib T1lib 0.5T1lib T1lib 0.6
NA
CVE-2011-0764
t1lib 5.1.2 and previous versions, as used in Xpdf prior to 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote malicious users to execute arbitrary code via a crafted Type 1 font in a PDF document, as demon...
T1lib T1lib 5.0.2T1lib T1lib 5.0.1T1lib T1lib 0.6T1lib T1lib 0.7T1lib T1lib 1.1.1T1lib T1lib 1.2T1lib T1lib 0.2T1lib T1lib 0.3T1lib T1lib 0.9.1T1lib T1lib 0.9.2T1lib T1libT1lib T1lib 5.0.0T1lib T1lib 0.1T1lib T1lib 0.8T1lib T1lib 0.9T1lib T1lib 1.3T1lib T1lib 1.3.1T1lib T1lib 5.1.1T1lib T1lib 5.1.0T1lib T1lib 0.4T1lib T1lib 0.5T1lib T1lib 1.0
NA
CVE-2010-3704
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf prior to 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent malicious users to cause a denial of service (crash) and possib...
Poppler Poppler 0.9.0Poppler Poppler 0.9.1Poppler Poppler 0.10.4Poppler Poppler 0.10.5Poppler Poppler 0.12.0Poppler Poppler 0.12.1Poppler Poppler 0.13.3Poppler Poppler 0.13.4Poppler Poppler 0.15.1Poppler Poppler 0.10.0Poppler Poppler 0.10.1Poppler Poppler 0.11.0Poppler Poppler 0.11.1Poppler Poppler 0.12.4Poppler Poppler 0.13.0Poppler Poppler 0.14.3Poppler Poppler 0.14.4Poppler Poppler 0.10.2Poppler Poppler 0.10.3Poppler Poppler 0.11.2Poppler Poppler 0.11.3Poppler Poppler 0.13.1
NA
CVE-2009-3603
Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x prior to 3.02pl4 and Poppler prior to 0.12.1 might allow remote malicious users to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are...
Poppler Poppler 0.7.3Poppler Poppler 0.3.2Poppler Poppler 0.10.3Poppler Poppler 0.4.0Poppler Poppler 0.9.3Poppler Poppler 0.10.1Poppler Poppler 0.10.0Poppler Poppler 0.10.7Poppler Poppler 0.7.1Poppler Poppler 0.6.1Poppler Poppler 0.3.1Poppler Poppler 0.11.3Poppler Poppler 0.10.6Foolabs Xpdf 3.02pl3Poppler Poppler 0.5.2Poppler Poppler 0.6.0Poppler Poppler 0.3.3Poppler Poppler 0.4.2Poppler Poppler 0.10.4Poppler Poppler 0.9.2Poppler Poppler 0.6.4Poppler Poppler 0.1.2
NA
CVE-2009-3606
Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf prior to 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote malicious users to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Foolabs Xpdf 3.02pl1Foolabs Xpdf 3.02pl2Foolabs Xpdf 3.02pl3Glyphandcog Xpdfreader 3.00Glyphandcog Xpdfreader 3.01Glyphandcog Xpdfreader 3.02Poppler Poppler 0.1Poppler Poppler 0.1.1Poppler Poppler 0.1.2Poppler Poppler 0.2.0Poppler Poppler 0.3.0Poppler Poppler 0.3.1Poppler Poppler 0.3.2Poppler Poppler 0.3.3Poppler Poppler 0.4.0Poppler Poppler 0.4.1Poppler Poppler 0.4.2Poppler Poppler 0.4.3Poppler Poppler 0.4.4Poppler Poppler 0.5.0Poppler Poppler 0.5.1Poppler Poppler 0.5.2
NA
CVE-2009-3608
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x prior to 3.02pl4 and Poppler prior to 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote malicious users to execute arbitrary code via a crafted PDF document tha...
Foolabs Xpdf 3.02pl1Foolabs Xpdf 3.02pl2Foolabs Xpdf 3.02pl3Glyphandcog Xpdfreader 3.00Glyphandcog Xpdfreader 3.01Glyphandcog Xpdfreader 3.02Poppler PopplerPoppler Poppler 0.1Poppler Poppler 0.1.1Poppler Poppler 0.1.2Poppler Poppler 0.2.0Poppler Poppler 0.3.0Poppler Poppler 0.3.1Poppler Poppler 0.3.2Poppler Poppler 0.3.3Poppler Poppler 0.4.0Poppler Poppler 0.4.1Poppler Poppler 0.4.2Poppler Poppler 0.4.3Poppler Poppler 0.4.4Poppler Poppler 0.5.0Poppler Poppler 0.5.1
NA
CVE-2009-3609
Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf prior to 3.02pl4 and Poppler prior to 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote malicious users to cause a denial of service (application crash) via a crafted PDF docum...
Foolabs Xpdf 3.02pl1Foolabs Xpdf 3.02pl2Foolabs Xpdf 3.02pl3Glyphandcog Xpdfreader 3.00Glyphandcog Xpdfreader 3.01Glyphandcog Xpdfreader 3.02Poppler PopplerPoppler Poppler 0.1Poppler Poppler 0.1.1Poppler Poppler 0.1.2Poppler Poppler 0.2.0Poppler Poppler 0.3.0Poppler Poppler 0.3.1Poppler Poppler 0.3.2Poppler Poppler 0.3.3Poppler Poppler 0.4.0Poppler Poppler 0.4.1Poppler Poppler 0.4.2Poppler Poppler 0.4.3Poppler Poppler 0.4.4Poppler Poppler 0.5.0Poppler Poppler 0.5.1
NA
CVE-2009-3604
The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x prior to 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote malicious users to cause a denial of service (application crash) or possibly execute arb...
Foolabs Xpdf 3.02pl1Foolabs Xpdf 3.02pl2Foolabs Xpdf 3.02pl3Glyphandcog Xpdfreader 2.00Glyphandcog Xpdfreader 2.01Glyphandcog Xpdfreader 2.02Glyphandcog Xpdfreader 2.03Glyphandcog Xpdfreader 3.00Glyphandcog Xpdfreader 3.01Glyphandcog Xpdfreader 3.02Poppler Poppler 0.1Poppler Poppler 0.1.1Poppler Poppler 0.1.2Poppler Poppler 0.2.0Poppler Poppler 0.3.0Poppler Poppler 0.3.1Poppler Poppler 0.3.2Poppler Poppler 0.3.3Poppler Poppler 0.4.0Poppler Poppler 0.4.1Poppler Poppler 0.4.2Poppler Poppler 0.4.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook