Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

pdftohtml pdftohtml 0.36 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2004-0888
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identifi...
Easy Software Products Cups 1.1.10Easy Software Products Cups 1.1.12Easy Software Products Cups 1.1.19Easy Software Products Cups 1.1.19 Rc5Gnome Gpdf 0.112Gnome Gpdf 0.131Kde Koffice 1.3 Beta3Kde Kpdf 3.2Pdftohtml Pdftohtml 0.36Tetex Tetex 1.0.7Xpdf Xpdf 1.0Xpdf Xpdf 1.0aEasy Software Products Cups 1.0.4Easy Software Products Cups 1.1.15Easy Software Products Cups 1.1.16Easy Software Products Cups 1.1.4 2Easy Software Products Cups 1.1.4 3Kde Koffice 1.3.2Kde Koffice 1.3.3Pdftohtml Pdftohtml 0.33Pdftohtml Pdftohtml 0.33aTetex Tetex 2.0.2
NA
CVE-2004-0889
Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888.
Easy Software Products Cups 1.0.4Easy Software Products Cups 1.1.12Easy Software Products Cups 1.1.13Easy Software Products Cups 1.1.19 Rc5Easy Software Products Cups 1.1.20Gnome Gpdf 0.131Kde Koffice 1.3Kde Kpdf 3.2Pdftohtml Pdftohtml 0.32aTetex Tetex 1.0.7Tetex Tetex 2.0Xpdf Xpdf 1.0aXpdf Xpdf 1.1Easy Software Products Cups 1.1.1Easy Software Products Cups 1.1.10Easy Software Products Cups 1.1.18Easy Software Products Cups 1.1.19Easy Software Products Cups 1.1.7Gnome Gpdf 0.112Kde Koffice 1.3 Beta2Kde Koffice 1.3 Beta3Pdftohtml Pdftohtml 0.35
NA
CVE-2005-0206
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
Easy Software Products Cups 1.0.4Easy Software Products Cups 1.0.4 8Easy Software Products Cups 1.1.1Easy Software Products Cups 1.1.17Easy Software Products Cups 1.1.18Easy Software Products Cups 1.1.4 5Easy Software Products Cups 1.1.6Kde Koffice 1.3.3Kde Koffice 1.3 Beta1Pdftohtml Pdftohtml 0.33aPdftohtml Pdftohtml 0.34Tetex Tetex 2.0.1Tetex Tetex 2.0.2Xpdf Xpdf 2.0Xpdf Xpdf 2.1Ascii Ptex 3.1.4Cstex Cstetex 2.0.2Easy Software Products Cups 1.1.15Easy Software Products Cups 1.1.16Easy Software Products Cups 1.1.4 2Easy Software Products Cups 1.1.4 3Kde Koffice 1.3
NA
CVE-2006-1244
Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in (1) gmem.c, (2) SplashXPa...
Libextractor Libextractor 0.3.8Libextractor Libextractor 0.3.9Xpdf Xpdf 0.92Xpdf Xpdf 0.93Xpdf Xpdf 1.0Xpdf Xpdf 3.0Xpdf Xpdf 3.0.1Libextractor Libextractor 0.3.6Libextractor Libextractor 0.3.7Xpdf Xpdf 0.90Xpdf Xpdf 0.91Xpdf Xpdf 2.2Xpdf Xpdf 2.3Libextractor Libextractor 0.4Libextractor Libextractor 0.4.1Xpdf Xpdf 1.0aXpdf Xpdf 1.1Xpdf Xpdf 3.0.1 Pl1Xpdf Xpdf 3.0 Pl2Gnome Gpdf 2.8.2Libextractor Libextractor 0.3.11Libextractor Libextractor 0.4.2
NA
CVE-2005-3193
Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and previous versions, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5) libextractor allows user-assisted malicious u...
Xpdf Xpdf 0.93Xpdf Xpdf 1.0Xpdf Xpdf 1.0aXpdf Xpdf 3.0.1Xpdf Xpdf 3.0 Pl2Xpdf Xpdf 0.90Xpdf Xpdf 2.1Xpdf Xpdf 2.2Xpdf Xpdf 0.91Xpdf Xpdf 0.92Xpdf Xpdf 2.3Xpdf Xpdf 3.0Xpdf Xpdf 1.1Xpdf Xpdf 2.0Xpdf Xpdf 3.0 Pl3
NA
CVE-2005-3192
Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote malicious users to execute arbitrary code via a PDF file w...
Xpdf Xpdf 3.0.1
NA
CVE-2005-3628
Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows malicious users to modify memory and possibly execute arbitrary code via unknown attack ve...
Xpdf Xpdf
NA
CVE-2005-3624
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows malicious users to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integ...
Kde Kdegraphics 3.2Kde Kdegraphics 3.4.3Sgi Propack 3.0Tetex Tetex 1.0.7Libextractor LibextractorEasy Software Products Cups 1.1.23Easy Software Products Cups 1.1.23 Rc1Kde Kword 1.4.2Poppler Poppler 0.4.2Xpdf Xpdf 3.0Conectiva Linux 10.0Easy Software Products Cups 1.1.22Easy Software Products Cups 1.1.22 Rc1Kde Koffice 1.4.2Kde Kpdf 3.2Kde Kpdf 3.4.3Tetex Tetex 2.0.2Tetex Tetex 3.0Kde Koffice 1.4Kde Koffice 1.4.1Tetex Tetex 2.0Tetex Tetex 2.0.1
NA
CVE-2005-3625
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows malicious users to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, a...
Kde Kdegraphics 3.2Kde Kdegraphics 3.4.3Easy Software Products Cups 1.1.22Easy Software Products Cups 1.1.22 Rc1Kde Kpdf 3.2Kde Kpdf 3.4.3Tetex Tetex 2.0.2Tetex Tetex 3.0Kde Koffice 1.4Sgi Propack 3.0Tetex Tetex 1.0.7Libextractor LibextractorKde Koffice 1.4.1Kde Koffice 1.4.2Tetex Tetex 2.0Tetex Tetex 2.0.1Easy Software Products Cups 1.1.23Easy Software Products Cups 1.1.23 Rc1Kde Kword 1.4.2Poppler Poppler 0.4.2Xpdf Xpdf 3.0Conectiva Linux 10.0
NA
CVE-2005-3626
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows malicious users to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.
Easy Software Products Cups 1.1.22 Rc1Easy Software Products Cups 1.1.23Kde Kpdf 3.2Kde Kpdf 3.4.3Tetex Tetex 3.0Xpdf Xpdf 3.0Easy Software Products Cups 1.1.23 Rc1Kde Kdegraphics 3.2Kde Kword 1.4.2Poppler Poppler 0.4.2Conectiva Linux 10.0Libextractor LibextractorKde Kdegraphics 3.4.3Kde Koffice 1.4Sgi Propack 3.0Tetex Tetex 1.0.7Easy Software Products Cups 1.1.22Kde Koffice 1.4.1Kde Koffice 1.4.2Tetex Tetex 2.0Tetex Tetex 2.0.1Tetex Tetex 2.0.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook