3473 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-38238
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar at /xpdf/Stream.cc. CVE-2022-38238 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2021-27548
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a Null Pointer Dereference vulnerability in the XFAScanner::scanNode function in XFAScanner.cc in xpdf 4.03. CVE-2021-27548 Note that Nessus relies on...
Linux Distros Unpatched Vulnerability : CVE-2024-7867
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Xpdf 4.05 and earlier, very large coordinates in a page box can cause an integer overflow and divide- by-zero. CVE-2024-7867 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2023-2662
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Xpdf 4.04 and earlier, a bad color space object in the input PDF file can cause a divide-by-zero. CVE-2023-2662 Note that Nessus relies on the presence of th...
Linux Distros Unpatched Vulnerability : CVE-2010-3704
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics...
Linux Distros Unpatched Vulnerability : CVE-2024-7866
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Xpdf 4.05 and earlier, a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow. CVE-2024-7866 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2018-18651
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xpdf 4.00. catalog-getNumPages in AcroForm.cc allows attackers to launch a denial of service hang caused by large loop via a specific...
Linux Distros Unpatched Vulnerability : CVE-2009-3609
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and...
Linux Distros Unpatched Vulnerability : CVE-2009-3606
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to...
Linux Distros Unpatched Vulnerability : CVE-2023-3436
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xpdf 4.04 will deadlock on a PDF object stream whose Length field is itself in another object stream. CVE-2023-3436 Note that Nessus relies on the presence of t...
NewStart CGSL MAIN 7.02 : xpdf Multiple Vulnerabilities (NS-SA-2025-0121)
The remote NewStart CGSL host, running version MAIN 7.02, has xpdf packages installed that are affected by multiple vulnerabilities: - XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393. CVE-2022-38928 - There is a use-after-free issue in JBIG2Stream::close located in...
CVE-2022-48545
An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02...
CVE-2022-41844
An issue was discovered in Xpdf 4.04. There is a crash in XRef::fetchint, int, Object, int in xpdf/XRef.cc, a different vulnerability than CVE-2018-16369 and CVE-2019-16088...
CVE-2022-38235
XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar at /xpdf/Stream.cc...
CVE-2022-38231
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar at /xpdf/Stream.cc...
CVE-2022-27135
xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service Segmentation fault or other unspecified effects by sending a crafted PDF file to the pdftoppm binary...
SUSE CVE-2025-3154
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary...
CVE-2025-3154
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary...
