CVE-2020-19469

An issue has been found in function DCTStream::reset in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 8...

CVE-2020-19467

An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Illegal Use After Free...

CVE-2020-19466

An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 1...

Null pointer dereference

An issue has been found in function DCTStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a NULL pointer dereference invalid read of size 1...

Design/Logic Flaw

An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an uncaught floating point exception...

CVE-2020-19475

Vulnerability summary. CVE-2020-19475 affects PDF2JSON 0.70 (built on XPDF 3.02). The issue resides in CCITTFaxStream::lookChar, where an invalid write of size 2 can cause a Denial of Service. Multiple sources (NVD, RH, CNVD, OSV, CNVD) corroborate this description. The connected documents do not...

CVE-2020-19473

An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an uncaught floating point exception...

CVE-2020-19472

PDF2JSON 0.70 contains a Denial of Service vulnerability in DCTStream::readHuffSym caused by an invalid read of size 2. The issue is documented across multiple sources (e.g., NVD, RH, CNVD) and specifically affects PDF2JSON’s DCTStream::readHuffSym path. The connected documents confirm the vulner...

CVE-2020-19470

PDF2JSON 0.70 contains a vulnerability in DCTStream::getChar where a NULL pointer dereference can trigger Denial of Service. Affected software: PDF2JSON 0.70 (Java-based library as described). Root cause: NULL read in getChar leads to DoS. Exploitation details, affected versions beyond 0.70, work...

CVE-2020-19469

An issue has been found in function DCTStream::reset in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 8...

CVE-2020-19468

PDF2JSON 0.70 contains a vulnerability in EmbedStream::getChar that can cause a Denial of Service via a null pointer dereference (invalid read of size 8). Affected software: PDF2JSON 0.70 (no further versions specified in the provided documents). The root cause is described as a null pointer dere...

CVE-2020-19467

CVE-2020-19467 affects PDF2JSON 0.70, where the DCTStream::transformDataUnit function contains a use-after-free condition that can lead to Denial of Service. The issue is described consistently across multiple sources (NVD, RH Advisory, CNVD, OSV, CVE listings) as a DoS vulnerability caused by an...

CVE-2020-19466

An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 1...

CVE-2020-19464

An issue has been found in function XRef::fetch in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow...

CVE-2020-19463

The CVE-2020-19463 issue affects PDF2JSON 0.70, with the vulnerability in the vfprintf function that can trigger a stack overflow and cause a Denial of Service. The exploitation details are not provided in the sources, and remediation status is unclear; one PT Security entry notes that there is n...

PT-2021-10349 · Pdf2Json · Pdf2Json

Name of the Vulnerable Software and Affected Versions: PDF2JSON version 0.70 Description: The issue is related to a stack overflow in the XRef::fetch function, allowing attackers to cause a Denial of Service. Recommendations: For PDF2JSON version 0.70, consider disabling the XRef::fetch function ...

Modesty Pdf2json 代码问题漏洞

Modesty Pdf2json is a Java-based code library from Modesty's personal developer that allows PDF files to interact with Json files. PDF2JSON version 0.70 has a security vulnerability that stems from an issue found in the function DCTStream::getChar, which could be used by an attacker to cause a...

PT-2021-10348 · Pdf2Json · Pdf2Json

Name of the Vulnerable Software and Affected Versions: PDF2JSON version 0.70 Description: An issue in the vfprintf function allows attackers to cause a Denial of Service due to a stack overflow. Recommendations: For PDF2JSON version 0.70, at the moment, there is no information about a newer versi...

UBUNTU-CVE-2018-19149

Poppler before 0.70.0 has a NULL pointer dereference in popplerattachmentnew when called from popplerannotfileattachmentgetattachment...

markdown-it and NodeBB HTML injection vulnerability (CNVD-2016-00135)

markdown-it is a parser product. NodeBB is a forum system developed by the Design Create Play team and built using Node.js, a web application platform built on top of Google's V8 JavaScript engine. An HTML injection vulnerability exists in markdown-it versions prior to 4.1.0 and NodeBB versions...