CVE-2018-18455

The vulnerability (CVE-2018-18455) affects Xpdf 4.00, specifically the GfxImageColorMap class in GfxState.cc. A crafted PDF file can trigger a heap-based buffer over-read, leading to denial of service (as demonstrated by pdftoppm). The description is corroborated across multiple connected sources...

CVE-2018-18456

The function Object::isName in Object.h called from Gfx::opSetFillColorN in Xpdf 4.00 allows remote attackers to cause a denial of service stack-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18454

CCITTFaxStream::readRow in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18457

The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18458

The function DCTStream::decodeImage in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18455

The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18459

The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18456

The function Object::isName in Object.h called from Gfx::opSetFillColorN in Xpdf 4.00 allows remote attackers to cause a denial of service stack-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18457: NULL Pointer Dereference

The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

PT-2018-14469

Name of the Vulnerable Software and Affected Versions Xpdf version 4.00 Description The issue allows remote attackers to cause a denial of service via a crafted pdf file. This can be achieved by exploiting the GfxImageColorMap class in GfxState.cc. A demonstration of this exploit is possible usin...

CVE-2018-18455: Out-of-bounds Read

The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18454: Out-of-bounds Read

CCITTFaxStream::readRow in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18456: Out-of-bounds Read

The function Object::isName in Object.h called from Gfx::opSetFillColorN in Xpdf 4.00 allows remote attackers to cause a denial of service stack-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18459: NULL Pointer Dereference

The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

PT-2018-14472

Name of the Vulnerable Software and Affected Versions Xpdf version 4.00 Description The issue allows remote attackers to cause a denial of service via a crafted pdf file. This is due to a NULL pointer dereference in the DCTStream::decodeImage function in Stream.cc. Recommendations For Xpdf versio...

PT-2018-14468 · Xpdf +2 · Xpdf +2

Name of the Vulnerable Software and Affected Versions: Xpdf version 4.00 Description: The issue allows remote attackers to cause a denial of service, specifically a heap-based buffer over-read, via a crafted pdf file. This is demonstrated by the use of pdftoppm, which exploits the...

PT-2018-14473

Name of the Vulnerable Software and Affected Versions Xpdf version 4.00 Description The issue allows remote attackers to cause a denial of service via a crafted pdf file. This is due to a NULL pointer dereference in the DCTStream::getBlock function in Stream.cc. Recommendations For Xpdf version...

PT-2018-14471

Name of the Vulnerable Software and Affected Versions Xpdf version 4.00 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, via a crafted pdf file. This is demonstrated by the use of pdftoppm, which interacts with the vulnerable...

CVE-2018-18458: NULL Pointer Dereference

The function DCTStream::decodeImage in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

PT-2018-14470 · Foolabs +2 · Xpdf +2

Name of the Vulnerable Software and Affected Versions: Xpdf version 4.00 Description: The issue allows remote attackers to cause a denial of service via a crafted pdf file. This is due to a stack-based buffer over-read in the function Object::isName in Object.h, which is called from...