Lucene search
+L

3474 matches found

osv_debian
osv_debian
•added 2018/02/24 6:29 a.m.•15 views

DEBIAN-CVE-2018-7454

A NULL pointer dereference in XFAForm::scanFields in XFAForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml...

5.5CVSS6.7AI score0.00784EPSS
SaveExploits0References1
Prion
Prion
•added 2018/02/24 6:29 a.m.•16 views

Null pointer dereference

A NULL pointer dereference in JPXStream::fillReadBuf in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml...

4.3CVSS5.3AI score0.00787EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2018/02/24 6:00 a.m.•85 views

CVE-2018-7452

CVE-2018-7452 affects xpdf 4.00, caused by a NULL pointer dereference in JPXStream::fillReadBuf (JPXStream.cc). This can be exploited to cause a denial of service by processing a crafted PDF file (demonstrated by pdftohtml). Remediation exists: Fedora/Fedora-related advisories indicate updating t...

5.5CVSS5.2AI score0.00787EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2018/02/24 6:00 a.m.•79 views

CVE-2018-7454

CVE-2018-7454 affects xpdf 4.00, where a NULL pointer dereference in XFAForm::scanFields (XFAForm.cc) can cause denial of service when processing a crafted PDF (demonstrated by pdftohtml). Connected sources confirm the issue in xpdf 4.00 and downstream advisories note a fix parity with xpdf 4.01 ...

5.5CVSS5.2AI score0.00784EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2018/02/24 6:00 a.m.•4 views

CVE-2018-7453

Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop checking, as demonstrated by pdftohtml...

6.8CVSS0.00898EPSS
SaveExploits0References3
Mend
Mend
•added 2018/02/24 6:00 a.m.•5 views

CVE-2018-7452

A NULL pointer dereference in JPXStream::fillReadBuf in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml...

6.8CVSS0.00787EPSS
SaveExploits1References3
CVE
CVE
•added 2018/02/24 6:00 a.m.•86 views

CVE-2018-7453

Xpdf 4.00 contains an infinite recursion in AcroForm::scanField (AcroForm.cc) caused by insufficient loop checking, enabling denial of service when processing specially crafted PDFs (as demonstrated by pdftohtml). The issue affects xpdf-4.00 and is discussed in multiple advisories. Remediation gu...

5.5CVSS5.1AI score0.00898EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2018/02/24 6:00 a.m.•6 views

CVE-2018-7454

A NULL pointer dereference in XFAForm::scanFields in XFAForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml...

6.8CVSS0.00784EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2018/02/24 6:00 a.m.•40 views

CVE-2018-7453

Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop checking, as demonstrated by pdftohtml...

5.5AI score0.00898EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/02/24 6:00 a.m.•42 views

CVE-2018-7455

An out-of-bounds read in JPXStream::readTilePart in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml...

5.3AI score0.00784EPSS
SaveExploits0References1
CVE
CVE
•added 2018/02/24 6:00 a.m.•66 views

CVE-2018-7455

The vulnerability CVE-2018-7455 affects xpdf 4.00, where an out-of-bounds read in JPXStream::readTilePart (JPXStream.cc) can cause denial of service when processing a crafted PDF (as demonstrated by pdftohtml). The issue resides in the JPXStream implementation used for reading tile parts; input c...

5.5CVSS5.3AI score0.00784EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/02/24 6:00 a.m.•52 views

CVE-2018-7452

A NULL pointer dereference in JPXStream::fillReadBuf in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml...

5.3AI score0.00787EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2018/02/24 6:00 a.m.•59 views

CVE-2018-7454

A NULL pointer dereference in XFAForm::scanFields in XFAForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml...

5.3AI score0.00784EPSS
SaveExploits0References1
Mend
Mend
•added 2018/02/24 6:00 a.m.•5 views

CVE-2018-7455

An out-of-bounds read in JPXStream::readTilePart in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml...

6.8CVSS0.00784EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2018/02/24 6:00 a.m.•64 views

CVE-2018-7453

Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop checking, as demonstrated by pdftohtml...

5.5CVSS4.8AI score0.00898EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2018/02/24 6:00 a.m.•66 views

CVE-2018-7455

An out-of-bounds read in JPXStream::readTilePart in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml...

5.5CVSS4.8AI score0.00784EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/24 12:00 a.m.•8 views

CVE-2018-7455: Out-of-bounds Read

An out-of-bounds read in JPXStream::readTilePart in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml...

5.5CVSS6AI score0.00784EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/02/24 12:00 a.m.•3 views

PT-2018-18081

Name of the Vulnerable Software and Affected Versions xpdf version 4.00 Description The issue is related to an out-of-bounds read in the JPXStream::readTilePart function in JPXStream.cc. This can be exploited by attackers to launch a denial of service attack via a specifically crafted pdf file, a...

5.5CVSS0.00784EPSS
SaveExploits0References8
CNVD
CNVD
•added 2018/02/24 12:00 a.m.•33 views

Xpdf 'JPXStream::fillReadBuf' function null pointer dereference vulnerability

Xpdf is an open source PDF reader , it supports decoding LZW compressed format files as well as reading encrypted PDF files . A security vulnerability exists in the 'JPXStream::fillReadBuf' function in the JPXStream.cc file in Xpdf version 4.00. An attacker can exploit this vulnerability to cause...

5.5CVSS6.7AI score0.00787EPSS
SaveExploits1References1
CNVD
CNVD
•added 2018/02/24 12:00 a.m.•18 views

Xpdf 'XFAForm::scanFields' function null pointer dereference vulnerability

Xpdf is an open source PDF reader , it supports decoding LZW compressed format files as well as reading encrypted PDF files . Xpdf 4.00 version of the XFAForm.cc file in the 'XFAForm::scanFields' function has a security vulnerability. An attacker can exploit this vulnerability to cause a denial o...

5.5CVSS6.7AI score0.00784EPSS
SaveExploits0References1
Rows per page
Query Builder