3473 matches found
PT-2022-24307 · Xpdf · Xpdf
Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A heap-buffer overflow was discovered in XPDF via the DCTStream::lookChar function at /xpdf/Stream.cc. This issue is related to commit ffaf11c. Recommendations: At the moment, there is no...
SWFTools 缓冲区错误漏洞
SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that stems from a segmentation violation in FoFiTrueType::computeTableChecksumunsigned char, int in the file /xpdf/FoFiTrueType.cc...
CVE-2022-38233: Improper Check for Unusual or Exceptional Conditions
XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::readMCURow at /xpdf/Stream.cc...
CVE-2022-38228: Out-of-bounds Write
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc...
CVE-2022-35104: Out-of-bounds Write
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::reset at /xpdf/Stream.cc...
CVE-2022-38234: Improper Check for Unusual or Exceptional Conditions
XPDF commit ffaf11c was discovered to contain a segmentation violation via Lexer::getObjObject at /xpdf/Lexer.cc...
PT-2022-24300 · Xpdf · Xpdf
Name of the Vulnerable Software and Affected Versions: XPDF version ffaf11c Description: A floating point exception FPE was discovered in XPDF via the DCTStream::decodeImage function at /xpdf/Stream.cc. Recommendations: For XPDF version ffaf11c, consider applying a patch or fix to resolve the...
PT-2022-24303 · Xpdf · Xpdf
Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A segmentation violation was discovered in XPDF via the Lexer::getObjObject function at /xpdf/Lexer.cc. This issue was identified in XPDF commit ffaf11c. Recommendations: At the moment, there ...
PT-2022-24304 · Xpdf · Xpdf
Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A segmentation violation was discovered in XPDF via the DCTStream::getChar function at /xpdf/Stream.cc. This issue affects the DCTStream::getChar function, which is located in the...
CVE-2022-38230: Incorrect Comparison
XPDF commit ffaf11c was discovered to contain a floating point exception FPE via DCTStream::decodeImage at /xpdf/Stream.cc...
CVE-2022-38236: Buffer Copy without Checking Size of Input
XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObjObject at /xpdf/Lexer.cc...
PT-2022-24296 · Xpdf · Xpdf
Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A stack overflow issue was discovered in XPDF, specifically in the commit ffaf11c, via the asan memcpy function at asan interceptors memintrinsics.cpp. Recommendations: At the moment, there is...
CVE-2022-38222
There is a use-after-free issue in JBIG2Stream::close located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to for example the pdfimages binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact...
CVE-2022-38222
CVE-2022-38222 affects Xpdf 4.04, with a use-after-free in JBIG2Stream::close() (JBIG2Stream.cc). Triggered by sending a crafted PDF to pdfimages, it allows Denial of Service and possibly other impact. Public sources in the connected documents confirm the vulnerability and indicate fixes in later...
CVE-2022-38222
There is a use-after-free issue in JBIG2Stream::close located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to for example the pdfimages binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact...
CVE-2022-38222
There is a use-after-free issue in JBIG2Stream::close located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to for example the pdfimages binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact...
PT-2022-24294 · Xpdf +1 · Xpdf +1
Name of the Vulnerable Software and Affected Versions: Xpdf version 4.04 Description: The issue is related to a use-after-free problem in the JBIG2Stream::close function, located in the JBIG2Stream.cc file. This can be triggered by sending a crafted PDF file to the pdfimages binary, for example. ...
CVE-2022-38222: Use After Free
There is a use-after-free issue in JBIG2Stream::close located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to for example the pdfimages binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact...
PT-2022-7283 · Xpdf +1 · Xpdf +1
Name of the Vulnerable Software and Affected Versions: Xpdf version 4.0.4 Description: The issue exists due to insufficient input validation in the /xpdf/AcroForm.cc:538 component of the Xpdf software, which can lead to a segmentation violation. Exploitation of this issue may allow an attacker to...
