Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xpdf xpdf 1.0a vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2005-3191
Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and previous versions, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtm...
Xpdf Xpdf 1.0Xpdf Xpdf 1.0aXpdf Xpdf 3.0 Pl2Xpdf Xpdf 3.0 Pl3Xpdf Xpdf 0.92Xpdf Xpdf 0.93Xpdf Xpdf 3.0Xpdf Xpdf 3.0.1Xpdf Xpdf 1.1Xpdf Xpdf 2.0Xpdf Xpdf 0.90Xpdf Xpdf 0.91Xpdf Xpdf 2.1Xpdf Xpdf 2.2Xpdf Xpdf 2.3
NA
CVE-2005-3193
Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and previous versions, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5) libextractor allows user-assisted malicious u...
Xpdf Xpdf 0.93Xpdf Xpdf 1.0Xpdf Xpdf 1.0aXpdf Xpdf 3.0.1Xpdf Xpdf 3.0 Pl2Xpdf Xpdf 0.90Xpdf Xpdf 2.1Xpdf Xpdf 2.2Xpdf Xpdf 0.91Xpdf Xpdf 0.92Xpdf Xpdf 2.3Xpdf Xpdf 3.0Xpdf Xpdf 1.1Xpdf Xpdf 2.0Xpdf Xpdf 3.0 Pl3
NA
CVE-2005-0064
Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and previous versions allows remote malicious users to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.
Xpdf Xpdf 0.4Xpdf Xpdf 0.5Xpdf Xpdf 0.91Xpdf Xpdf 0.91aXpdf Xpdf 0.92eXpdf Xpdf 0.93Xpdf Xpdf 2.0Xpdf Xpdf 2.1Xpdf Xpdf 0.5aXpdf Xpdf 0.6Xpdf Xpdf 0.91bXpdf Xpdf 0.91cXpdf Xpdf 0.93aXpdf Xpdf 0.93bXpdf Xpdf 2.2Xpdf Xpdf 2.3Xpdf Xpdf 0.7Xpdf Xpdf 0.7aXpdf Xpdf 0.92Xpdf Xpdf 0.92aXpdf Xpdf 0.93cXpdf Xpdf 1.0
NA
CVE-2006-1244
Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in (1) gmem.c, (2) SplashXPa...
Libextractor Libextractor 0.3.8Libextractor Libextractor 0.3.9Xpdf Xpdf 0.92Xpdf Xpdf 0.93Xpdf Xpdf 1.0Xpdf Xpdf 3.0Xpdf Xpdf 3.0.1Libextractor Libextractor 0.3.6Libextractor Libextractor 0.3.7Xpdf Xpdf 0.90Xpdf Xpdf 0.91Xpdf Xpdf 2.2Xpdf Xpdf 2.3Libextractor Libextractor 0.4Libextractor Libextractor 0.4.1Xpdf Xpdf 1.0aXpdf Xpdf 1.1Xpdf Xpdf 3.0.1 Pl1Xpdf Xpdf 3.0 Pl2Gnome Gpdf 2.8.2Libextractor Libextractor 0.3.11Libextractor Libextractor 0.4.2
NA
CVE-2002-1384
Integer overflow in pdftops, as used in Xpdf 2.01 and previous versions, xpdf-i, and CUPS prior to 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
Easy Software Products Cups 1.0.4Easy Software Products Cups 1.1.4Easy Software Products Cups 1.1.4 2Xpdf Xpdf 1.0aXpdf Xpdf 1.1Easy Software Products Cups 1.0.4 8Easy Software Products Cups 1.1.1Easy Software Products Cups 1.1.4 3Easy Software Products Cups 1.1.4 5Xpdf Xpdf 2.0Xpdf Xpdf 2.1Easy Software Products Cups 1.1.10Easy Software Products Cups 1.1.13Easy Software Products Cups 1.1.6Easy Software Products Cups 1.1.7Xpdf Xpdf 0.90Easy Software Products Cups 1.1.14Easy Software Products Cups 1.1.17Xpdf Xpdf 0.91Xpdf Xpdf 1.0
NA
CVE-2004-0888
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identifi...
Easy Software Products Cups 1.1.10Easy Software Products Cups 1.1.12Easy Software Products Cups 1.1.19Easy Software Products Cups 1.1.19 Rc5Gnome Gpdf 0.112Gnome Gpdf 0.131Kde Koffice 1.3 Beta3Kde Kpdf 3.2Pdftohtml Pdftohtml 0.36Tetex Tetex 1.0.7Xpdf Xpdf 1.0Xpdf Xpdf 1.0aEasy Software Products Cups 1.0.4Easy Software Products Cups 1.1.15Easy Software Products Cups 1.1.16Easy Software Products Cups 1.1.4 2Easy Software Products Cups 1.1.4 3Kde Koffice 1.3.2Kde Koffice 1.3.3Pdftohtml Pdftohtml 0.33Pdftohtml Pdftohtml 0.33aTetex Tetex 2.0.2
NA
CVE-2004-0889
Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888.
Easy Software Products Cups 1.0.4Easy Software Products Cups 1.1.12Easy Software Products Cups 1.1.13Easy Software Products Cups 1.1.19 Rc5Easy Software Products Cups 1.1.20Gnome Gpdf 0.131Kde Koffice 1.3Kde Kpdf 3.2Pdftohtml Pdftohtml 0.32aTetex Tetex 1.0.7Tetex Tetex 2.0Xpdf Xpdf 1.0aXpdf Xpdf 1.1Easy Software Products Cups 1.1.1Easy Software Products Cups 1.1.10Easy Software Products Cups 1.1.18Easy Software Products Cups 1.1.19Easy Software Products Cups 1.1.7Gnome Gpdf 0.112Kde Koffice 1.3 Beta2Kde Koffice 1.3 Beta3Pdftohtml Pdftohtml 0.35
NA
CVE-2005-0206
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
Easy Software Products Cups 1.0.4Easy Software Products Cups 1.0.4 8Easy Software Products Cups 1.1.1Easy Software Products Cups 1.1.17Easy Software Products Cups 1.1.18Easy Software Products Cups 1.1.4 5Easy Software Products Cups 1.1.6Kde Koffice 1.3.3Kde Koffice 1.3 Beta1Pdftohtml Pdftohtml 0.33aPdftohtml Pdftohtml 0.34Tetex Tetex 2.0.1Tetex Tetex 2.0.2Xpdf Xpdf 2.0Xpdf Xpdf 2.1Ascii Ptex 3.1.4Cstex Cstetex 2.0.2Easy Software Products Cups 1.1.15Easy Software Products Cups 1.1.16Easy Software Products Cups 1.1.4 2Easy Software Products Cups 1.1.4 3Kde Koffice 1.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook