CVE-2019-10021

An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nComps...

PT-2019-11297

Name of the Vulnerable Software and Affected Versions: Xpdf version 4.01.01 Description: An issue was discovered in the function ImageStream::ImageStream at Stream.cc for nBits, resulting in a floating-point exception FPE. Recommendations: For Xpdf version 4.01.01, at the moment, there is no...

PT-2019-11292

Name of the Vulnerable Software and Affected Versions: Xpdf version 4.01.01 Description: An issue was discovered in the function ImageStream::ImageStream at Stream.cc for nComps, resulting in a floating-point exception FPE. Recommendations: For Xpdf version 4.01.01, at the moment, there is no...

CVE-2019-10021: Divide By Zero

An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nComps...

CVE-2019-10025: Divide By Zero

An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nBits...

CVE-2019-9200

A heap-based buffer underwrite exists in ImageStream::getLine located at Stream.cc in Poppler 0.74.0 that can for example be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impa...

CVE-2019-9200

A heap-based buffer underwrite exists in ImageStream::getLine located at Stream.cc in Poppler 0.74.0 that can for example be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impa...

Heap overflow

A heap-based buffer underwrite exists in ImageStream::getLine located at Stream.cc in Poppler 0.74.0 that can for example be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impa...

CVE-2019-9200

A heap-based buffer underwrite exists in ImageStream::getLine located at Stream.cc in Poppler 0.74.0 that can for example be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impa...

CVE-2019-9200

A heap-based buffer underwrite exists in ImageStream::getLine located at Stream.cc in Poppler 0.74.0 that can for example be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impa...

CVE-2019-9200

CVE-2019-9200: A heap-based buffer underwrite in ImageStream::getLine() (Stream.cc) in Poppler 0.74.0 can be triggered by a crafted PDF sent to pdfimages, leading to Denial of Service (segmentation fault) or possibly other impact. Connected advisories enumerate the issue across affected packages,...

CVE-2019-9200: Out-of-bounds Write

A heap-based buffer underwrite exists in ImageStream::getLine located at Stream.cc in Poppler 0.74.0 that can for example be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impa...

UBUNTU-CVE-2019-9200

A heap-based buffer underwrite exists in ImageStream::getLine located at Stream.cc in Poppler 0.74.0 that can for example be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impa...

CVE-2019-9200

A heap-based buffer underwrite exists in ImageStream::getLine located at Stream.cc in Poppler 0.74.0 that can for example be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impa...

PT-2019-4952

Name of the Vulnerable Software and Affected Versions Poppler version 0.74.0 Description A heap-based buffer underwrite exists in the ImageStream::getLine function located at Stream.cc in Poppler. This issue can be triggered by sending a crafted PDF file to the pdfimages binary, allowing an...

ownDMS 4.7 - SQL Injection

ownDMS 4.7 - SQL Injection Exploit Title: ownDMS 4.7 - SQL Injection Dork: N/A Date: 2019-01-15 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.owndms.com/ Software Link: https://datapacket.dl.sourceforge.net/project/owndms/owndms47.zip Version: 4.7 Category: Webapps Tested on:...

atomic-openshift: image import whitelist can be bypassed by creating an imagestream or using oc tag

The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed...

CVE-2017-14617

In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files...

Unspecified Vulnerability in Poppler Stream.cc File

Poppler is a C++ class library for generating PDF, the library is inherited from Xpdf PDF reader. A security vulnerability exists in the ImageStream class of the Stream.cc file in Poppler version 0.59.0. No details of the vulnerability are provided at this time...

CVE-2017-14617

In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files...