Lucene search
+L

69 matches found

OSS-Fuzz
OSS-Fuzz
•added 2020/11/27 3:41 p.m.•10 views

poppler:page_search_fuzzer: Heap-buffer-overflow in TextPage::findText

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5117390333149184 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

5.9AI score
SaveExploits0
ArchLinux
ArchLinux
•added 2019/10/16 12:00 a.m.•50 views

[ASA-201910-10] xpdf: arbitrary code execution

Arch Linux Security Advisory ASA-201910-10 ========================================== Severity: Medium Date : 2019-10-16 CVE-ID : CVE-2019-16927 Package : xpdf Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1048 Summary ======= The package xpdf before versio...

5.5CVSS2.1AI score0.00856EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2019/10/07 12:00 a.m.•44 views

FreeBSD : Xpdf -- Multiple Vulnerabilities (791e8f79-e7d1-11e9-8b31-206a8a720317)

Xpdf 4.02 fixes two vulnerabilities. Both fixes have been backported to 3.04. An invalid memory access vulnerability in TextPage::findGaps in Xpdf 4.01 through a crafted PDF document can cause a segfault. An out of bounds write exists in TextPage::findGaps of Xpdf 4.01.01 C Tenable Network...

7.8CVSS6.4AI score0.01197EPSS
SaveExploits2References4
Mageia
Mageia
•added 2019/10/06 4:32 p.m.•86 views

Updated xpdf packages fix security vulnerabilities

The updated xpdf packages fix security vulnerabilities: An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpIdiv case. CVE-2019-10018 An issue was discovered in Xpdf 4.01.01. There is an FPE in the function...

5.5CVSS2.4AI score0.01105EPSS
SaveExploits5References1
FreeBSD
FreeBSD
•added 2019/10/01 12:00 a.m.•58 views

Xpdf -- Multiple Vulnerabilities

Xpdf 4.02 fixes two vulnerabilities. Both fixes have been backported to 3.04. An invalid memory access vulnerability in TextPage::findGaps in Xpdf 4.01 through a crafted PDF document can cause a segfault. An out of bounds write exists in TextPage::findGaps of Xpdf 4.01.01...

7.8CVSS6.8AI score0.01197EPSS
SaveExploits2References4
osv_cve
osv_cve
•added 2019/09/27 8:15 p.m.•10 views

CVE-2019-16927

Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877...

5.5CVSS6.7AI score0.00856EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2019/09/27 8:15 p.m.•17 views

UBUNTU-CVE-2019-16927

Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877...

5.5CVSS6.7AI score0.00856EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2019/09/27 8:15 p.m.•39 views

CVE-2019-16927

Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877...

5.5CVSS6.8AI score0.00856EPSS
SaveExploits1References2
Prion
Prion
•added 2019/09/27 8:15 p.m.•49 views

Out-of-bounds

Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877...

4.3CVSS6.3AI score0.01141EPSS
SaveExploits2References1Affected Software1
CVE
CVE
•added 2019/09/27 7:57 p.m.•244 views

CVE-2019-16927

CVE-2019-16927 affects Xpdf 4.01.01. The vulnerability is an out-of-bounds write in the TextPage::findGaps function (TextOutputDev.cc, vertProfile path). The issue is triggered by a crafted PDF document and is described across multiple sources as a vulnerability in Xpdf 4.01.01 distinct from CVE-...

5.5CVSS5.6AI score0.00856EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2019/09/27 7:57 p.m.•10 views

CVE-2019-16927

Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877...

6.8CVSS0.00856EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/27 12:00 a.m.•6 views

CVE-2019-16927: Out-of-bounds Write

Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877...

5.5CVSS6.4AI score0.00856EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/09/27 12:00 a.m.•7 views

PT-2019-14874

Name of the Vulnerable Software and Affected Versions Xpdf version 4.01.01 Description The issue is related to an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc. Recommendations For Xpdf version 4.01.01, at the moment, there is no information...

5.5CVSS0.00856EPSS
SaveExploits1References9
Prion
Prion
•added 2019/03/21 4:01 p.m.•36 views

Design/Logic Flaw

There is an invalid memory access vulnerability in the function TextPage::findGaps located at TextOutputDev.c in Xpdf 4.01, which can for example be triggered by sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have...

6.8CVSS6.7AI score0.01141EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
•added 2019/03/21 4:01 p.m.•55 views

CVE-2019-9877

There is an invalid memory access vulnerability in the function TextPage::findGaps located at TextOutputDev.c in Xpdf 4.01, which can for example be triggered by sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have...

7.8CVSS6.8AI score0.01141EPSS
SaveExploits1References3
osv_ubuntu
osv_ubuntu
•added 2019/03/21 4:01 p.m.•27 views

UBUNTU-CVE-2019-9877

There is an invalid memory access vulnerability in the function TextPage::findGaps located at TextOutputDev.c in Xpdf 4.01, which can for example be triggered by sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have...

7.8CVSS6.8AI score0.01141EPSS
SaveExploits1References4
CNVD
CNVD
•added 2019/03/20 12:00 a.m.•25 views

Xpdf Invalid Memory Access Vulnerability

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. An invalid memory access vulnerability exists in the TextPage::findGaps function in TextOutputDev.c in Xpdf 4.01. An attacker can exploit this vulnerability by sending a specially craft...

7.8CVSS6.9AI score0.01141EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2019/03/19 12:00 a.m.•10 views

PT-2019-19910

Name of the Vulnerable Software and Affected Versions Xpdf version 4.01 Description The issue is related to an invalid memory access in the TextPage::findGaps function, located in TextOutputDev.c. This can be triggered by sending a crafted pdf file to the pdftops binary, potentially allowing an...

7.8CVSS0.01141EPSS
SaveExploits1References7
CNVD
CNVD
•added 2018/10/16 12:00 a.m.•18 views

pdfalto buffer overflow vulnerability

Pdfalto is a command-line tool for parsing PDF files and generate XML structured content in ALTO format. A heap buffer overflow vulnerability exists in the 'TextPage::addAttributsNode' function in the XmlAltoOutputDev.cc file in Pdfalto version 0.2, which can be exploited by an attacker to execut...

7.8CVSS8.2AI score0.01246EPSS
SaveExploits1References1
Prion
Prion
•added 2018/10/12 10:15 p.m.•24 views

Heap overflow

A issue was found in pdfalto 0.2. There is a heap-based buffer overflow in the TextPage::addAttributsNode function in XmlAltoOutputDev.cc...

6.8CVSS7.8AI score0.01246EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder