Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
xpdfreader xpdf vulnerabilities and exploits
(subscribe to this query)
6.8
CVSSv2
CVE-2020-24999
There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2. It can be triggered by sending a crafted PDF file to the pdftohtml binary, which allows a remote malicious user to cause a Denial of Service (Segmentation fault) or possibly have unspecif...
Xpdfreader Xpdf 4.0.2
6.8
CVSSv2
CVE-2020-24996
There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftohtml binary, which allows a remote malicious user to cause a Denial of Service (Segmentatio...
Xpdfreader Xpdf 4.0.2
6.8
CVSSv2
CVE-2012-2142
The error function in Error.cc in poppler prior to 0.21.4 allows remote malicious users to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.
Freedesktop Poppler
Xpdfreader Xpdf 3.02
Redhat Enterprise Linux 5.0
Redhat Enterprise Linux 6.0
Opensuse Opensuse 12.2
4.3
CVSSv2
CVE-2010-0206
xpdf allows remote malicious users to cause a denial of service (NULL pointer dereference and crash) in the way it processes JBIG2 PDF stream objects.
Xpdfreader Xpdf 3.03-17
Xpdfreader Xpdf 3.04-4
Xpdfreader Xpdf 3.04-13
4.3
CVSSv2
CVE-2010-0207
In xpdf, the xref table contains an infinite loop which allows remote malicious users to cause a denial of service (application crash) in xpdf-based PDF viewers.
Xpdfreader Xpdf 3.03-17
Xpdfreader Xpdf 3.04-4
Xpdfreader Xpdf 3.04-13
4.3
CVSSv2
CVE-2019-17064
Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor.
Glyphandcog Xpdfreader 4.02
6.8
CVSSv2
CVE-2019-16115
In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It allows an malicious user to use a cra...
Glyphandcog Xpdfreader 4.01.01
4.3
CVSSv2
CVE-2019-16088
Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc.
Glyphandcog Xpdfreader 3.04
4.3
CVSSv2
CVE-2019-15860
Xpdf 2.00 allows a SIGSEGV in XRef::constructXRef in XRef.cc. NOTE: 2.00 is a version from November 2002.
Glyphandcog Xpdfreader 2.00
4.3
CVSSv2
CVE-2019-14293
An issue exists in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA!=6 case 2.
Glyphandcog Xpdfreader 4.01.01
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
firmware
CVE-2023-52866
CVE-2024-4367
CVE-2024-1721
CVE-2023-34992
XML injection
CVE-2023-52817
SQL
CVE-2023-52855
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »