UBUNTU-CVE-2020-25725

In Xpdf 4.02, SplashOutputDev::endType3CharGfxState state SplashOutputDev.cc:3079 is trying to use the freed t3GlyphStack-cache, which causes an heap-use-after-free problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to...

Xpdf Invalid Memory Access Vulnerability (CNVD-2020-54075)

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. An invalid memory access vulnerability exists in the fprintf function in Error.cc in Xpdf 4.0.2. An attacker can exploit this vulnerability by sending a specially crafted PDF file to a...

Arbitrary Code Execution

xpdf is vulnerable to arbitrary code execution. The vulnerability exists as multiple integer overflow flaws were found in Xpdf. An attacker could create a malicious PDF file that would cause Xpdf to crash or, potentially, execute arbitrary code when opened...

Arbitrary Code Execution

xpdf is vulnerable to arbitrary code execution. The vulnerability exists as an attacker could create a malicious PDF file that would cause Xpdf to crash or, potentially, execute arbitrary code when opened...

Arbitrary Code Execution

xpdf is vulnerable to arbitrary code execution. The vulnerability exists as an attacker could create a malicious PDF file that would cause Xpdf to crash or, potentially, execute arbitrary code when opened...

CVE-2010-0206

xpdf allows remote attackers to cause a denial of service NULL pointer dereference and crash in the way it processes JBIG2 PDF stream objects...

CVE-2010-0207

In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service application crash in xpdf-based PDF viewers...

CVE-2010-0206

xpdf allows remote attackers to cause a denial of service NULL pointer dereference and crash in the way it processes JBIG2 PDF stream objects...

CVE-2010-0206

xpdf allows remote attackers to cause a denial of service NULL pointer dereference and crash in the way it processes JBIG2 PDF stream objects...

Xpdf null pointer dereference vulnerability (CNVD-2019-38488)

Xpdf is an open source PDF reader from Foo Labs. The product supports decoding LZW compressed format files and read encrypted PDF files. Xpdf suffers from a null pointer dereference vulnerability. An attacker could exploit this vulnerability to cause the application to crash...

UBUNTU-CVE-2019-16927

Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877...

CVE-2019-16115

In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It allows an attacker to use a crafted PDF file to cause...

UBUNTU-CVE-2019-16115

In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It allows an attacker to use a crafted PDF file to cause...

PT-2019-14499 · Foxtan +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: Xpdf version 3.04 Description: The issue occurs due to a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc. Recommendations: For Xpdf version 3.04, at the moment, there is no information abou...

Xpdf out-of-bounds read vulnerability (CNVD-2019-26661)

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. An out-of-bounds read vulnerability exists in the GfxPatchMeshShading::parse function in GfxState.cc in Xpdf 4.01.01. An attacker can exploit this vulnerability to cause a denial of...

Xpdf Integer Overflow Vulnerability

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. An integer overflow vulnerability exists in the JBIG2Bitmap::combine function in JBIG2Stream.cc in Xpdf 4.01.01. An attacker can exploit this vulnerability to cause a denial of service...

Xpdf out-of-bounds read vulnerability (CNVD-2019-26659)

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. An out-of-bounds read vulnerability exists in the GfxPatchMeshShading::parse function in GfxState.cc in Xpdf 4.01.01. An attacker can exploit this vulnerability to cause a denial of...

Xpdf out-of-bounds read vulnerability (CNVD-2019-26662)

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. An out-of-bounds read vulnerability exists in the GfxPatchMeshShading::parse function in GfxState.cc in Xpdf 4.01.01. An attacker can exploit this vulnerability to cause a denial of...

CVE-2019-14294

An issue was discovered in Xpdf 4.01.01. There is a use-after-free in the function JPXStream::fillReadBuf at JPXStream.cc, due to an out of bounds read...

CVE-2019-14291

An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA==6 case 3...