Mageia: Security Advisory (MGASA-2019-0293)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2020-0291)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2021-0112)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

xpdf:fuzz_pdfload: Heap-buffer-overflow in Catalog::getPage

Detailed Report: https://oss-fuzz.com/testcase?key=6735595475435520 Project: xpdf Fuzzing Engine: honggfuzz Fuzz Target: fuzzpdfload Job Type: honggfuzzasanxpdf Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60200001e648 Crash State: Catalog::getPage PDFDoc::getLinks...

xpdf:fuzz_pdfload: Heap-buffer-overflow in JPXStream::fillReadBuf

Detailed Report: https://oss-fuzz.com/testcase?key=4808304333815808 Project: xpdf Fuzzing Engine: afl Fuzz Target: fuzzpdfload Job Type: aflasanxpdf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x61f000000cc0 Crash State: JPXStream::fillReadBuf JPXStream::getChar...

xpdf:fuzz_pdfload: Heap-buffer-overflow in JPXStream::readTilePart

Detailed Report: https://oss-fuzz.com/testcase?key=5320528844423168 Project: xpdf Fuzzing Engine: afl Fuzz Target: fuzzpdfload Job Type: aflasanxpdf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x7f44d914d800 Crash State: JPXStream::readTilePart...

xpdf:fuzz_pdfload: Heap-buffer-overflow in JPXStream::inverseTransformLevel

Detailed Report: https://oss-fuzz.com/testcase?key=4897295645147136 Project: xpdf Fuzzing Engine: afl Fuzz Target: fuzzpdfload Job Type: aflasanxpdf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x606000003d1c Crash State: JPXStream::inverseTransformLevel...

PDF2JSON EmbedStream::getChar Denial of Service Vulnerability

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. PDF2JSON EmbedStream::getChar suffers from a security vulnerability. An attacker could exploit this vulnerability to cause a denial of service...

PDF2JSON DCTStream::transformDataUnit Denial of Service Vulnerability

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. PDF2JSON DCTStream::transformDataUnit suffers from a denial of service vulnerability. The vulnerability stems from an invalid read of size 1. An attacker could exploit...

PDF2JSON CCITTFaxStream::lookChar Denial of Service Vulnerability

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. A denial of service vulnerability exists in the CCITTFaxStream::lookChar function in PDF2JSON version 0.70. The vulnerability stems from an invalid write of size 2. An...

PDF2JSON DCTStream::readHuffSym Denial of Service Vulnerability

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. PDF2JSON DCTStream::readHuffSym suffers from a denial of service vulnerability. The vulnerability stems from an invalid read of size 2. An attacker could exploit this...

PDF2JSON DCTStream::decodeImage Denial of Service Vulnerability

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. PDF2JSON DCTStream::decodeImage suffers from a denial of service vulnerability. The vulnerability stems from a floating-point exception. An attacker could exploit this...

PDF2JSON DCTStream::transformDataUnit Denial of Service Vulnerability (CNVD-2021-55955)

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. A denial of service vulnerability exists in PDF2JSON DCTStream::transformDataUnit. The vulnerability stems from an invalid read of size 4. An attacker could exploit this...

PDF2JSON Gfx::doShowText Denial of Service Vulnerability

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages to JSON and XML formats on a page-by-page basis. PDF2JSON Gfx::doShowText has a security vulnerability. An attacker could exploit this vulnerability to cause a denial of service...

Modesty Pdf2json 缓冲区错误漏洞

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. A denial of service vulnerability exists in the CCITTFaxStream::lookChar function in PDF2JSON version 0.70. The vulnerability stems from an invalid write of size 2. An...

PDF2JSON 资源管理错误漏洞

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages to JSON and XML formats on a page-by-page basis. PDF2JSON Gfx::doShowText has a security vulnerability. An attacker could exploit this vulnerability to cause a denial of service...

Modesty Pdf2json 代码问题漏洞

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. PDF2JSON EmbedStream::getChar suffers from a security vulnerability. An attacker could exploit this vulnerability to cause a denial of service...

xpdf:fuzz_pdfload: Dynamic-stack-buffer-overflow in gmallocn

Detailed Report: https://oss-fuzz.com/testcase?key=4536777573531648 Project: xpdf Fuzzing Engine: afl Fuzz Target: fuzzpdfload Job Type: aflasanxpdf Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE Crash Address: 0x7ffeba6aba10 Crash State: gmallocn...

xpdf:fuzz_pdfload: Stack-use-after-scope in GString::appendfv

Detailed Report: https://oss-fuzz.com/testcase?key=5095773137141760 Project: xpdf Fuzzing Engine: afl Fuzz Target: fuzzpdfload Job Type: aflasanxpdf Platform Id: linux Crash Type: Stack-use-after-scope READ 4 Crash Address: 0x7ffe2e51a200 Crash State: GString::appendfv GString::appendf...

Stack Consumption

xpdf is vulnerable to stack consumption. The vulnerability exists due to an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp function...