Lucene search
+L

3121 matches found

CNVD
CNVD
added 2019/10/08 12:0 a.m.8 views

Xpdf null pointer dereference vulnerability (CNVD-2019-38488)

Xpdf is an open source PDF reader from Foo Labs. The product supports decoding LZW compressed format files and read encrypted PDF files. Xpdf suffers from a null pointer dereference vulnerability. An attacker could exploit this vulnerability to cause the application to crash...

5.5CVSS6.7AI score0.01413EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2019/10/07 12:0 a.m.34 views

FreeBSD : Xpdf -- Multiple Vulnerabilities (791e8f79-e7d1-11e9-8b31-206a8a720317)

Xpdf 4.02 fixes two vulnerabilities. Both fixes have been backported to 3.04. An invalid memory access vulnerability in TextPage::findGaps in Xpdf 4.01 through a crafted PDF document can cause a segfault. An out of bounds write exists in TextPage::findGaps of Xpdf 4.01.01 C Tenable Network...

7.8CVSS6.4AI score0.01197EPSS
SaveExploits2References4
OSV
OSV
added 2019/10/06 4:32 p.m.12 views

MGASA-2019-0293 Updated xpdf packages fix security vulnerabilities

The updated xpdf packages fix security vulnerabilities: An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpIdiv case. CVE-2019-10018 An issue was discovered in Xpdf 4.01.01. There is an FPE in the function...

5.5CVSS5.8AI score0.01105EPSS
SaveExploits5References2
Mageia
Mageia
added 2019/10/06 4:32 p.m.69 views

Updated xpdf packages fix security vulnerabilities

The updated xpdf packages fix security vulnerabilities: An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpIdiv case. CVE-2019-10018 An issue was discovered in Xpdf 4.01.01. There is an FPE in the function...

5.5CVSS2.4AI score0.01105EPSS
SaveExploits5References1
OpenVAS
OpenVAS
added 2019/10/02 12:0 a.m.21 views

Xpdf <= 4.02 Denial of Service (DoS) Vulnerability

Xpdf is prone to a denial of service DoS vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

5.5CVSS5.3AI score0.01413EPSS
SaveExploits1References2
NVD
NVD
added 2019/10/01 4:15 p.m.20 views

CVE-2019-17064

Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor...

5.5CVSS5.4AI score0.01413EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2019/10/01 4:15 p.m.22 views

CVE-2019-17064

Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor...

5.5CVSS6.1AI score0.01413EPSS
SaveExploits1References3
Prion
Prion
added 2019/10/01 4:15 p.m.17 views

Null pointer dereference

Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor...

4.3CVSS5.4AI score0.01413EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2019/10/01 4:15 p.m.6 views

UBUNTU-CVE-2019-17064

Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor...

5.5CVSS6AI score0.01413EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2019/10/01 3:22 p.m.25 views

CVE-2019-17064

Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor...

5.3AI score0.01413EPSS
SaveExploits1References4
CVE
CVE
added 2019/10/01 3:22 p.m.109 views

CVE-2019-17064

The CVE-2019-17064 issue is a NULL pointer dereference in Catalog.cc of Xpdf 4.02 caused by late initialization of Catalog.pageLabels. Updates have been released (e.g., Fedora 2019-b890d4aad2; Mageia MGASA-2019-0422) to apply the upstream fix. Affected products are Xpdf 4.02; no exploitation deta...

5.5CVSS5.2AI score0.01413EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
added 2019/10/01 3:22 p.m.21 views

CVE-2019-17064

Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor...

5.5CVSS3.3AI score0.01413EPSS
SaveExploits1
FreeBSD
FreeBSD
added 2019/10/01 12:0 a.m.48 views

Xpdf -- Multiple Vulnerabilities

Xpdf 4.02 fixes two vulnerabilities. Both fixes have been backported to 3.04. An invalid memory access vulnerability in TextPage::findGaps in Xpdf 4.01 through a crafted PDF document can cause a segfault. An out of bounds write exists in TextPage::findGaps of Xpdf 4.01.01...

7.8CVSS2.2AI score0.01197EPSS
SaveExploits2References4
NVD
NVD
added 2019/09/27 8:15 p.m.28 views

CVE-2019-16927

Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877...

5.5CVSS6AI score0.00856EPSS
SaveExploits1References1
Prion
Prion
added 2019/09/27 8:15 p.m.36 views

Out-of-bounds

Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877...

4.3CVSS6.3AI score0.01141EPSS
SaveExploits2References1Affected Software1
OSV
OSV
added 2019/09/27 8:15 p.m.5 views

UBUNTU-CVE-2019-16927

Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877...

5.5CVSS6.7AI score0.00856EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2019/09/27 8:15 p.m.30 views

CVE-2019-16927

Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877...

5.5CVSS6.8AI score0.00856EPSS
SaveExploits1References2
CVE
CVE
added 2019/09/27 7:57 p.m.219 views

CVE-2019-16927

CVE-2019-16927 affects Xpdf 4.01.01. The vulnerability is an out-of-bounds write in the TextPage::findGaps function (TextOutputDev.cc, vertProfile path). The issue is triggered by a crafted PDF document and is described across multiple sources as a vulnerability in Xpdf 4.01.01 distinct from CVE-...

5.5CVSS5.6AI score0.00856EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
added 2019/09/27 7:57 p.m.61 views

CVE-2019-16927

Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877...

5.5CVSS6.4AI score0.00856EPSS
SaveExploits1
Cvelist
Cvelist
added 2019/09/27 7:57 p.m.39 views

CVE-2019-16927

Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877...

5.7AI score0.00856EPSS
SaveExploits1References1
Rows per page
Query Builder