Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xpdfreader xpdf 3.02 vulnerabilities and exploits

(subscribe to this query)
6.9
CVSSv2
CVE-2009-1144
Untrusted search path vulnerability in the Gentoo package of Xpdf prior to 3.02-r2 allows local users to gain privileges via a Trojan horse xpdfrc file in the current working directory, related to an unset SYSTEM_XPDFRC macro in a Gentoo build process that uses the poppler librar...
Glyphandcog Xpdfreader 2.03Glyphandcog Xpdfreader 2.02Foolabs Xpdf 0.93bFoolabs Xpdf 0.93aGlyphandcog Xpdfreader 0.91Foolabs Xpdf 0.91cFoolabs Xpdf 0.91bFoolabs Xpdf 0.5aGlyphandcog Xpdfreader 0.5Glyphandcog Xpdfreader 2.01Glyphandcog Xpdfreader 2.00Glyphandcog Xpdfreader 0.93Foolabs Xpdf 0.92eFoolabs Xpdf 0.91aGlyphandcog Xpdfreader 0.90Glyphandcog Xpdfreader 0.4Glyphandcog Xpdfreader 0.3Glyphandcog Xpdfreader 1.01Glyphandcog Xpdfreader 1.00Foolabs Xpdf 0.92dFoolabs Xpdf 0.92cGlyphandcog Xpdfreader 0.80
6.8
CVSSv2
CVE-2012-2142
The error function in Error.cc in poppler prior to 0.21.4 allows remote malicious users to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.
Freedesktop PopplerXpdfreader Xpdf 3.02Redhat Enterprise Linux 5.0Redhat Enterprise Linux 6.0Opensuse Opensuse 12.2
10
CVSSv2
CVE-2009-0165
Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and previous versions, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to "g*allocn."
Foolabs Xpdf 0.91aGlyphandcog Xpdfreader 0.90Glyphandcog Xpdfreader 0.4Glyphandcog Xpdfreader 0.3Glyphandcog Xpdfreader 1.01Foolabs Xpdf 0.93cFoolabs Xpdf 0.92dFoolabs Xpdf 0.92aFoolabs Xpdf 0.92bGlyphandcog XpdfreaderGlyphandcog Xpdfreader 3.01Glyphandcog Xpdfreader 0.91Glyphandcog Xpdfreader 0.6Foolabs Xpdf 0.5aGlyphandcog Xpdfreader 2.03Glyphandcog Xpdfreader 2.00Foolabs Xpdf 0.92eGlyphandcog Xpdfreader 0.93Glyphandcog Xpdfreader 0.80Foolabs Xpdf 0.7aGlyphandcog Xpdfreader 0.92Glyphandcog Xpdfreader 0.2
6.8
CVSSv2
CVE-2011-0764
t1lib 5.1.2 and previous versions, as used in Xpdf prior to 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote malicious users to execute arbitrary code via a crafted Type 1 font in a PDF document, as demon...
T1lib T1lib 5.0.2T1lib T1lib 5.0.1T1lib T1lib 0.6T1lib T1lib 0.7T1lib T1lib 1.1.1T1lib T1lib 1.2T1lib T1lib 0.2T1lib T1lib 0.3T1lib T1lib 0.9.1T1lib T1lib 0.9.2T1lib T1libT1lib T1lib 5.0.0T1lib T1lib 0.1T1lib T1lib 0.8T1lib T1lib 0.9T1lib T1lib 1.3T1lib T1lib 1.3.1T1lib T1lib 5.1.1T1lib T1lib 5.1.0T1lib T1lib 0.4T1lib T1lib 0.5T1lib T1lib 1.0
4.3
CVSSv2
CVE-2011-1552
t1lib 5.1.2 and previous versions, as used in Xpdf prior to 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote malicious users to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulne...
T1lib T1lib 5.0.2T1lib T1lib 5.0.1T1lib T1lib 5.0.0T1lib T1lib 0.7T1lib T1lib 0.8T1lib T1lib 5.1.1T1lib T1lib 5.1.0T1lib T1lib 0.5T1lib T1lib 0.6T1lib T1lib 1.0.1T1lib T1lib 1.1.0T1lib T1lib 0.1T1lib T1lib 0.2T1lib T1lib 0.9T1lib T1lib 0.9.1T1lib T1lib 1.3T1lib T1lib 1.3.1T1lib T1lib 0.3T1lib T1lib 0.4T1lib T1lib 0.9.2T1lib T1lib 1.0T1lib T1lib
4.3
CVSSv2
CVE-2011-1553
Use-after-free vulnerability in t1lib 5.1.2 and previous versions, as used in Xpdf prior to 3.02pl6, teTeX, and other products, allows remote malicious users to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an inva...
T1lib T1lib 0.1T1lib T1lib 0.2T1lib T1lib 0.9.1T1lib T1lib 0.9.2T1lib T1lib 1.3.1T1lib T1libT1lib T1lib 5.1.0T1lib T1lib 5.0.2T1lib T1lib 0.5T1lib T1lib 0.6T1lib T1lib 1.1.0T1lib T1lib 1.1.1T1lib T1lib 5.0.1T1lib T1lib 5.0.0T1lib T1lib 0.7T1lib T1lib 0.8T1lib T1lib 0.9T1lib T1lib 1.2T1lib T1lib 1.3T1lib T1lib 5.1.1T1lib T1lib 0.3T1lib T1lib 0.4
4.3
CVSSv2
CVE-2011-1554
Off-by-one error in t1lib 5.1.2 and previous versions, as used in Xpdf prior to 3.02pl6, teTeX, and other products, allows remote malicious users to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory r...
T1lib T1lib 5.0.0T1lib T1lib 0.1T1lib T1lib 0.2T1lib T1lib 0.9T1lib T1lib 0.9.1T1lib T1lib 1.3T1lib T1lib 1.3.1T1lib T1lib 0.3T1lib T1lib 0.4T1lib T1lib 0.9.2T1lib T1lib 1.0T1lib T1libT1lib T1lib 5.0.2T1lib T1lib 5.0.1T1lib T1lib 0.7T1lib T1lib 0.8T1lib T1lib 1.1.1T1lib T1lib 1.2T1lib T1lib 5.1.1T1lib T1lib 5.1.0T1lib T1lib 0.5T1lib T1lib 0.6
6.8
CVSSv2
CVE-2010-3704
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf prior to 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent malicious users to cause a denial of service (crash) and possib...
Poppler Poppler 0.9.0Poppler Poppler 0.9.1Poppler Poppler 0.10.4Poppler Poppler 0.10.5Poppler Poppler 0.12.0Poppler Poppler 0.12.1Poppler Poppler 0.13.3Poppler Poppler 0.13.4Poppler Poppler 0.15.1Poppler Poppler 0.10.0Poppler Poppler 0.10.1Poppler Poppler 0.11.0Poppler Poppler 0.11.1Poppler Poppler 0.12.4Poppler Poppler 0.13.0Poppler Poppler 0.14.3Poppler Poppler 0.14.4Poppler Poppler 0.10.2Poppler Poppler 0.10.3Poppler Poppler 0.11.2Poppler Poppler 0.11.3Poppler Poppler 0.13.1
6.8
CVSSv2
CVE-2007-3387
Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler prior to 0.5.91, (2) gpdf prior to 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote malicious users to execute arbitrary code via ...
Xpdfreader Xpdf 3.02Apple CupsFreedesktop PopplerGpdf Project GpdfDebian Debian Linux 3.1Debian Debian Linux 4.0Canonical Ubuntu Linux 7.04Canonical Ubuntu Linux 6.10Canonical Ubuntu Linux 6.06
4.3
CVSSv2
CVE-2009-0146
Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and previous versions, CUPS 1.3.9 and previous versions, and other products allow remote malicious users to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2SymbolDict::setBitmap and (2) J...
Glyphandcog Xpdfreader 3.01Glyphandcog Xpdfreader 2.03Glyphandcog Xpdfreader 2.02Foolabs Xpdf 0.93bFoolabs Xpdf 0.93aGlyphandcog Xpdfreader 0.92Foolabs Xpdf 0.91cGlyphandcog Xpdfreader 0.6Foolabs Xpdf 0.5aGlyphandcog XpdfreaderGlyphandcog Xpdfreader 3.00Glyphandcog Xpdfreader 1.00Foolabs Xpdf 0.93cFoolabs Xpdf 0.92bFoolabs Xpdf 0.92aGlyphandcog Xpdfreader 0.80Foolabs Xpdf 0.7aGlyphandcog Xpdfreader 0.7Glyphandcog Xpdfreader 2.01Glyphandcog Xpdfreader 2.00Glyphandcog Xpdfreader 0.93Foolabs Xpdf 0.92e
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook