Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
xpdf xpdf 1.0 vulnerabilities and exploits
(subscribe to this query)
454
VMScore
CVE-2005-3191
Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and previous versions, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtm...
Xpdf Xpdf 1.0
Xpdf Xpdf 1.0a
Xpdf Xpdf 3.0 Pl2
Xpdf Xpdf 3.0 Pl3
Xpdf Xpdf 0.92
Xpdf Xpdf 0.93
Xpdf Xpdf 3.0
Xpdf Xpdf 3.0.1
Xpdf Xpdf 1.1
Xpdf Xpdf 2.0
Xpdf Xpdf 0.90
Xpdf Xpdf 0.91
Xpdf Xpdf 2.1
Xpdf Xpdf 2.2
Xpdf Xpdf 2.3
454
VMScore
CVE-2005-3193
Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and previous versions, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5) libextractor allows user-assisted malicious u...
Xpdf Xpdf 0.93
Xpdf Xpdf 1.0
Xpdf Xpdf 1.0a
Xpdf Xpdf 3.0.1
Xpdf Xpdf 3.0 Pl2
Xpdf Xpdf 0.90
Xpdf Xpdf 2.1
Xpdf Xpdf 2.2
Xpdf Xpdf 0.91
Xpdf Xpdf 0.92
Xpdf Xpdf 2.3
Xpdf Xpdf 3.0
Xpdf Xpdf 1.1
Xpdf Xpdf 2.0
Xpdf Xpdf 3.0 Pl3
668
VMScore
CVE-2005-0064
Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and previous versions allows remote malicious users to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.
Xpdf Xpdf 0.4
Xpdf Xpdf 0.5
Xpdf Xpdf 0.91
Xpdf Xpdf 0.91a
Xpdf Xpdf 0.92e
Xpdf Xpdf 0.93
Xpdf Xpdf 2.0
Xpdf Xpdf 2.1
Xpdf Xpdf 0.5a
Xpdf Xpdf 0.6
Xpdf Xpdf 0.91b
Xpdf Xpdf 0.91c
Xpdf Xpdf 0.93a
Xpdf Xpdf 0.93b
Xpdf Xpdf 2.2
Xpdf Xpdf 2.3
Xpdf Xpdf 0.7
Xpdf Xpdf 0.7a
Xpdf Xpdf 0.92
Xpdf Xpdf 0.92a
Xpdf Xpdf 0.93c
Xpdf Xpdf 1.0
676
VMScore
CVE-2006-1244
Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in (1) gmem.c, (2) SplashXPa...
Libextractor Libextractor 0.3.8
Libextractor Libextractor 0.3.9
Xpdf Xpdf 0.92
Xpdf Xpdf 0.93
Xpdf Xpdf 1.0
Xpdf Xpdf 3.0
Xpdf Xpdf 3.0.1
Libextractor Libextractor 0.3.6
Libextractor Libextractor 0.3.7
Xpdf Xpdf 0.90
Xpdf Xpdf 0.91
Xpdf Xpdf 2.2
Xpdf Xpdf 2.3
Libextractor Libextractor 0.4
Libextractor Libextractor 0.4.1
Xpdf Xpdf 1.0a
Xpdf Xpdf 1.1
Xpdf Xpdf 3.0.1 Pl1
Xpdf Xpdf 3.0 Pl2
Gnome Gpdf 2.8.2
Libextractor Libextractor 0.3.11
Libextractor Libextractor 0.4.2
641
VMScore
CVE-2002-1384
Integer overflow in pdftops, as used in Xpdf 2.01 and previous versions, xpdf-i, and CUPS prior to 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
Easy Software Products Cups 1.0.4
Easy Software Products Cups 1.1.4
Easy Software Products Cups 1.1.4 2
Xpdf Xpdf 1.0a
Xpdf Xpdf 1.1
Easy Software Products Cups 1.0.4 8
Easy Software Products Cups 1.1.1
Easy Software Products Cups 1.1.4 3
Easy Software Products Cups 1.1.4 5
Xpdf Xpdf 2.0
Xpdf Xpdf 2.1
Easy Software Products Cups 1.1.10
Easy Software Products Cups 1.1.13
Easy Software Products Cups 1.1.6
Easy Software Products Cups 1.1.7
Xpdf Xpdf 0.90
Easy Software Products Cups 1.1.14
Easy Software Products Cups 1.1.17
Xpdf Xpdf 0.91
Xpdf Xpdf 1.0
605
VMScore
CVE-2011-0764
t1lib 5.1.2 and previous versions, as used in Xpdf prior to 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote malicious users to execute arbitrary code via a crafted Type 1 font in a PDF document, as demon...
T1lib T1lib 5.0.2
T1lib T1lib 5.0.1
T1lib T1lib 0.6
T1lib T1lib 0.7
T1lib T1lib 1.1.1
T1lib T1lib 1.2
T1lib T1lib 0.2
T1lib T1lib 0.3
T1lib T1lib 0.9.1
T1lib T1lib 0.9.2
T1lib T1lib
T1lib T1lib 5.0.0
T1lib T1lib 0.1
T1lib T1lib 0.8
T1lib T1lib 0.9
T1lib T1lib 1.3
T1lib T1lib 1.3.1
T1lib T1lib 5.1.1
T1lib T1lib 5.1.0
T1lib T1lib 0.4
T1lib T1lib 0.5
T1lib T1lib 1.0
383
VMScore
CVE-2011-1552
t1lib 5.1.2 and previous versions, as used in Xpdf prior to 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote malicious users to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulne...
T1lib T1lib 5.0.2
T1lib T1lib 5.0.1
T1lib T1lib 5.0.0
T1lib T1lib 0.7
T1lib T1lib 0.8
T1lib T1lib 5.1.1
T1lib T1lib 5.1.0
T1lib T1lib 0.5
T1lib T1lib 0.6
T1lib T1lib 1.0.1
T1lib T1lib 1.1.0
T1lib T1lib 0.1
T1lib T1lib 0.2
T1lib T1lib 0.9
T1lib T1lib 0.9.1
T1lib T1lib 1.3
T1lib T1lib 1.3.1
T1lib T1lib 0.3
T1lib T1lib 0.4
T1lib T1lib 0.9.2
T1lib T1lib 1.0
T1lib T1lib
383
VMScore
CVE-2011-1553
Use-after-free vulnerability in t1lib 5.1.2 and previous versions, as used in Xpdf prior to 3.02pl6, teTeX, and other products, allows remote malicious users to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an inva...
T1lib T1lib 0.1
T1lib T1lib 0.2
T1lib T1lib 0.9.1
T1lib T1lib 0.9.2
T1lib T1lib 1.3.1
T1lib T1lib
T1lib T1lib 5.1.0
T1lib T1lib 5.0.2
T1lib T1lib 0.5
T1lib T1lib 0.6
T1lib T1lib 1.1.0
T1lib T1lib 1.1.1
T1lib T1lib 5.0.1
T1lib T1lib 5.0.0
T1lib T1lib 0.7
T1lib T1lib 0.8
T1lib T1lib 0.9
T1lib T1lib 1.2
T1lib T1lib 1.3
T1lib T1lib 5.1.1
T1lib T1lib 0.3
T1lib T1lib 0.4
383
VMScore
CVE-2011-1554
Off-by-one error in t1lib 5.1.2 and previous versions, as used in Xpdf prior to 3.02pl6, teTeX, and other products, allows remote malicious users to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory r...
T1lib T1lib 5.0.0
T1lib T1lib 0.1
T1lib T1lib 0.2
T1lib T1lib 0.9
T1lib T1lib 0.9.1
T1lib T1lib 1.3
T1lib T1lib 1.3.1
T1lib T1lib 0.3
T1lib T1lib 0.4
T1lib T1lib 0.9.2
T1lib T1lib 1.0
T1lib T1lib
T1lib T1lib 5.0.2
T1lib T1lib 5.0.1
T1lib T1lib 0.7
T1lib T1lib 0.8
T1lib T1lib 1.1.1
T1lib T1lib 1.2
T1lib T1lib 5.1.1
T1lib T1lib 5.1.0
T1lib T1lib 0.5
T1lib T1lib 0.6
890
VMScore
CVE-2004-0888
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identifi...
Easy Software Products Cups 1.1.10
Easy Software Products Cups 1.1.12
Easy Software Products Cups 1.1.19
Easy Software Products Cups 1.1.19 Rc5
Gnome Gpdf 0.112
Gnome Gpdf 0.131
Kde Koffice 1.3 Beta3
Kde Kpdf 3.2
Pdftohtml Pdftohtml 0.36
Tetex Tetex 1.0.7
Xpdf Xpdf 1.0
Xpdf Xpdf 1.0a
Easy Software Products Cups 1.0.4
Easy Software Products Cups 1.1.15
Easy Software Products Cups 1.1.16
Easy Software Products Cups 1.1.4 2
Easy Software Products Cups 1.1.4 3
Kde Koffice 1.3.2
Kde Koffice 1.3.3
Pdftohtml Pdftohtml 0.33
Pdftohtml Pdftohtml 0.33a
Tetex Tetex 2.0.2
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injection
CVE-2006-4304
CVE-2023-26603
CVE-2024-28327
CVE-2023-50363
CVE-2024-21905
template injection
CVE-2024-3400
cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »