Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

poppler poppler 0.11.3 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2010-3703
The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent malicious users to cause a denial of service (crash) via a PDF file that t...
Poppler Poppler 0.9.0Poppler Poppler 0.9.1Poppler Poppler 0.10.4Poppler Poppler 0.10.5Poppler Poppler 0.12.0Poppler Poppler 0.12.1Poppler Poppler 0.13.3Poppler Poppler 0.13.4Poppler Poppler 0.14.0Poppler Poppler 0.15.1Poppler Poppler 0.10.2Poppler Poppler 0.10.3Poppler Poppler 0.11.2Poppler Poppler 0.11.3Poppler Poppler 0.13.1Poppler Poppler 0.13.2Poppler Poppler 0.14.5Poppler Poppler 0.15.0Poppler Poppler 0.10.0Poppler Poppler 0.10.1Poppler Poppler 0.11.0Poppler Poppler 0.11.1
NA
CVE-2009-3607
Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote malicious users to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffe...
Poppler Poppler 0.7.3Poppler Poppler 0.3.2Poppler Poppler 0.10.3Poppler Poppler 0.4.0Poppler Poppler 0.8.5Poppler Poppler 0.9.3Poppler Poppler 0.10.1Poppler Poppler 0.10.0Poppler Poppler 0.10.7Poppler Poppler 0.7.1Poppler Poppler 0.6.1Poppler Poppler 0.3.1Poppler Poppler 0.11.3Poppler Poppler 0.10.6Poppler Poppler 0.5.2Poppler Poppler 0.5.91Poppler Poppler 0.6.0Poppler Poppler 0.3.3Poppler Poppler 0.4.2Poppler Poppler 0.10.4Poppler Poppler 0.9.2Poppler Poppler 0.6.4
NA
CVE-2009-3603
Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x prior to 3.02pl4 and Poppler prior to 0.12.1 might allow remote malicious users to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are...
Poppler Poppler 0.7.3Poppler Poppler 0.3.2Poppler Poppler 0.10.3Poppler Poppler 0.4.0Poppler Poppler 0.9.3Poppler Poppler 0.10.1Poppler Poppler 0.10.0Poppler Poppler 0.10.7Poppler Poppler 0.7.1Poppler Poppler 0.6.1Poppler Poppler 0.3.1Poppler Poppler 0.11.3Poppler Poppler 0.10.6Foolabs Xpdf 3.02pl3Poppler Poppler 0.5.2Poppler Poppler 0.6.0Poppler Poppler 0.3.3Poppler Poppler 0.4.2Poppler Poppler 0.10.4Poppler Poppler 0.9.2Poppler Poppler 0.6.4Poppler Poppler 0.1.2
NA
CVE-2009-3606
Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf prior to 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote malicious users to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Foolabs Xpdf 3.02pl1Foolabs Xpdf 3.02pl2Foolabs Xpdf 3.02pl3Glyphandcog Xpdfreader 3.00Glyphandcog Xpdfreader 3.01Glyphandcog Xpdfreader 3.02Poppler Poppler 0.1Poppler Poppler 0.1.1Poppler Poppler 0.1.2Poppler Poppler 0.2.0Poppler Poppler 0.3.0Poppler Poppler 0.3.1Poppler Poppler 0.3.2Poppler Poppler 0.3.3Poppler Poppler 0.4.0Poppler Poppler 0.4.1Poppler Poppler 0.4.2Poppler Poppler 0.4.3Poppler Poppler 0.4.4Poppler Poppler 0.5.0Poppler Poppler 0.5.1Poppler Poppler 0.5.2
NA
CVE-2009-3608
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x prior to 3.02pl4 and Poppler prior to 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote malicious users to execute arbitrary code via a crafted PDF document tha...
Foolabs Xpdf 3.02pl1Foolabs Xpdf 3.02pl2Foolabs Xpdf 3.02pl3Glyphandcog Xpdfreader 3.00Glyphandcog Xpdfreader 3.01Glyphandcog Xpdfreader 3.02Poppler PopplerPoppler Poppler 0.1Poppler Poppler 0.1.1Poppler Poppler 0.1.2Poppler Poppler 0.2.0Poppler Poppler 0.3.0Poppler Poppler 0.3.1Poppler Poppler 0.3.2Poppler Poppler 0.3.3Poppler Poppler 0.4.0Poppler Poppler 0.4.1Poppler Poppler 0.4.2Poppler Poppler 0.4.3Poppler Poppler 0.4.4Poppler Poppler 0.5.0Poppler Poppler 0.5.1
NA
CVE-2009-3609
Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf prior to 3.02pl4 and Poppler prior to 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote malicious users to cause a denial of service (application crash) via a crafted PDF docum...
Foolabs Xpdf 3.02pl1Foolabs Xpdf 3.02pl2Foolabs Xpdf 3.02pl3Glyphandcog Xpdfreader 3.00Glyphandcog Xpdfreader 3.01Glyphandcog Xpdfreader 3.02Poppler PopplerPoppler Poppler 0.1Poppler Poppler 0.1.1Poppler Poppler 0.1.2Poppler Poppler 0.2.0Poppler Poppler 0.3.0Poppler Poppler 0.3.1Poppler Poppler 0.3.2Poppler Poppler 0.3.3Poppler Poppler 0.4.0Poppler Poppler 0.4.1Poppler Poppler 0.4.2Poppler Poppler 0.4.3Poppler Poppler 0.4.4Poppler Poppler 0.5.0Poppler Poppler 0.5.1
NA
CVE-2009-3604
The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x prior to 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote malicious users to cause a denial of service (application crash) or possibly execute arb...
Foolabs Xpdf 3.02pl1Foolabs Xpdf 3.02pl2Foolabs Xpdf 3.02pl3Glyphandcog Xpdfreader 2.00Glyphandcog Xpdfreader 2.01Glyphandcog Xpdfreader 2.02Glyphandcog Xpdfreader 2.03Glyphandcog Xpdfreader 3.00Glyphandcog Xpdfreader 3.01Glyphandcog Xpdfreader 3.02Poppler Poppler 0.1Poppler Poppler 0.1.1Poppler Poppler 0.1.2Poppler Poppler 0.2.0Poppler Poppler 0.3.0Poppler Poppler 0.3.1Poppler Poppler 0.3.2Poppler Poppler 0.3.3Poppler Poppler 0.4.0Poppler Poppler 0.4.1Poppler Poppler 0.4.2Poppler Poppler 0.4.3
NA
CVE-2010-3704
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf prior to 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent malicious users to cause a denial of service (crash) and possib...
Poppler Poppler 0.9.0Poppler Poppler 0.9.1Poppler Poppler 0.10.4Poppler Poppler 0.10.5Poppler Poppler 0.12.0Poppler Poppler 0.12.1Poppler Poppler 0.13.3Poppler Poppler 0.13.4Poppler Poppler 0.15.1Poppler Poppler 0.10.0Poppler Poppler 0.10.1Poppler Poppler 0.11.0Poppler Poppler 0.11.1Poppler Poppler 0.12.4Poppler Poppler 0.13.0Poppler Poppler 0.14.3Poppler Poppler 0.14.4Poppler Poppler 0.10.2Poppler Poppler 0.10.3Poppler Poppler 0.11.2Poppler Poppler 0.11.3Poppler Poppler 0.13.1
NA
CVE-2013-7296
The JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler prior to 0.24.5 does not use the correct specifier within a format string, which allows context-dependent malicious users to cause a denial of service (segmentation fault and application crash) via a crafted PDF fi...
Freedesktop Poppler 0.23.3Freedesktop Poppler 0.23.2Freedesktop Poppler 0.22.0Freedesktop Poppler 0.21.4Freedesktop Poppler 0.20.3Freedesktop Poppler 0.20.2Freedesktop Poppler 0.19.0Freedesktop Poppler 0.18.4Freedesktop Poppler 0.17.2Freedesktop Poppler 0.17.1Freedesktop Poppler 0.16.2Freedesktop Poppler 0.16.1Freedesktop Poppler 0.14.3Freedesktop Poppler 0.14.2Freedesktop Poppler 0.13.0Freedesktop Poppler 0.12.4Freedesktop Poppler 0.11.1Freedesktop Poppler 0.11.0Freedesktop Poppler 0.10.0Freedesktop Poppler 0.1.2Freedesktop PopplerFreedesktop Poppler 0.24.2
NA
CVE-2013-4473
Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler prior to 0.24.2 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a source filename.
Freedesktop Poppler 0.22.4Freedesktop Poppler 0.22.3Freedesktop Poppler 0.1Freedesktop Poppler 0.1.1Freedesktop Poppler 0.11.3Freedesktop Poppler 0.12.0Freedesktop Poppler 0.12.1Freedesktop Poppler 0.12.2Freedesktop Poppler 0.12.3Freedesktop Poppler 0.15.0Freedesktop Poppler 0.15.1Freedesktop Poppler 0.15.2Freedesktop Poppler 0.15.3Freedesktop Poppler 0.18.0Freedesktop Poppler 0.18.1Freedesktop Poppler 0.18.2Freedesktop Poppler 0.18.3Freedesktop Poppler 0.21.0Freedesktop Poppler 0.21.1Freedesktop Poppler 0.21.2Freedesktop Poppler 0.21.3Freedesktop Poppler 0.4.4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook