CVE-2023-3436 Deadlock in Xpdf 4.04 due to PDF object stream references

Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream...

CVE-2023-3436

Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream...

Xpdf 安全漏洞

Xpdf is a free PDF viewer and toolkit from Xpdf, including a text extractor, image converter, HTML converter and more. A security vulnerability exists in Xpdf version 4.04, which stems from the presence of a runtime deadlock problem...

CVE-2023-2663

In Xpdf 4.04 and earlier, a PDF object loop in the page label tree leads to infinite recursion and a stack overflow...

CVE-2023-2662

In Xpdf 4.04 and earlier, a bad color space object in the input PDF file can cause a divide-by-zero...

Stack overflow

In Xpdf 4.04 and earlier, a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow...

Design/Logic Flaw

In Xpdf 4.04 and earlier, a bad color space object in the input PDF file can cause a divide-by-zero...

CVE-2023-2664 Stack overflow in Xpdf 4.04 due to object loop in PDF embedded file tree

In Xpdf 4.04 and earlier, a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow...

CVE-2023-2664

In Xpdf 4.04 and earlier, a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow...

CVE-2023-2663 Stack overflow in Xpdf 4.04 due to object loop in PDF page label tree

In Xpdf 4.04 and earlier, a PDF object loop in the page label tree leads to infinite recursion and a stack overflow...

CVE-2023-2663

In Xpdf 4.04 and earlier, a PDF object loop in the page label tree leads to infinite recursion and a stack overflow...

CVE-2023-2662 Divide-by-zero in Xpdf 4.04 due to bad color space object

In Xpdf 4.04 and earlier, a bad color space object in the input PDF file can cause a divide-by-zero...

CVE-2023-2662

In Xpdf 4.04 and earlier, a bad color space object in the input PDF file can cause a divide-by-zero...

PT-2023-23388 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: xpdf pdfimages version 4.04 Description: A stack overflow was discovered in the Catalog::readEmbeddedFileTreeObject component, allowing attackers to cause a Denial of Service DoS. Recommendations: For xpdf pdfimages version 4.04, at the momen...

PT-2023-23385 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: xpdf pdfimages version 4.04 Description: A stack overflow was discovered in the Catalog::readPageLabelTree2Object component, allowing attackers to cause a Denial of Service DoS. Recommendations: For xpdf pdfimages version 4.04, at the moment,...

CVE-2023-26938

Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service viaSharedFile::readBlock located in goo/gfile.cc. Notes Author| Note ---|--- ebarretto | xpdf in Debian uses poppler, which is not affected or fixed...

PT-2023-20857 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF version 4.04 Description: A Buffer Overflow issue allows an attacker to cause a Denial of Service. The issue is related to the readBlock function at /xpdf/Stream.cc. Recommendations: For XPDF version 4.04, at the moment, there is no...

PT-2023-20860 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF version 4.04 Description: A Buffer Overflow issue has been found, allowing an attacker to cause a Denial of Service. The issue is related to the SharedFile::readBlock function located in goo/gfile.cc. Recommendations: For XPDF version...

PT-2023-20858 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF version 4.04 Description: A Buffer Overflow issue has been discovered, allowing an attacker to cause a Denial of Service via gmalloc in gmem.cc. Recommendations: For XPDF version 4.04, at the moment, there is no information about a newer...

PT-2023-20854 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: XPDF version 4.04 Description: A Buffer Overflow issue allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. The vendor states that this is an expected abort on out-of-memory error. Recommendation...