Lucene search
+L

3473 matches found

Cvelist
Cvelist
•added 2024/08/15 7:50 p.m.•48 views

CVE-2024-7866 Stack overflow in Xpdf 4.05 due to object loop in PDF pattern

In Xpdf 4.05 and earlier, a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow...

2.1CVSS0.00217EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2024/08/15 7:50 p.m.•106 views

CVE-2024-7866

In Xpdf 4.05 and earlier, a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow...

5.5CVSS7AI score0.00217EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2024/08/15 7:50 p.m.•66 views

CVE-2024-7866

In Xpdf 4.05 and earlier, a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow...

5.5CVSS5.3AI score0.00217EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/08/15 7:50 p.m.•18 views

CVE-2024-7866 Stack overflow in Xpdf 4.05 due to object loop in PDF pattern

In Xpdf 4.05 and earlier, a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow...

2.1CVSS6.9AI score0.00217EPSS
SaveExploits0References1
Mend
Mend
•added 2024/08/15 7:50 p.m.•2 views

CVE-2024-7866

In Xpdf 4.05 and earlier, a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow...

5.5CVSS0.00217EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/08/15 12:00 a.m.•16 views

Xpdf 安全漏洞

Xpdf is a free PDF viewer and toolkit from Xpdf, Inc. that includes a text extractor, image converter, HTML converter, and more. A security vulnerability exists in Xpdf version 4.05 and earlier versions, which stems from a PDF object loop in a schema resource that can lead to infinite recursion a...

5.5CVSS6.3AI score0.00217EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/08/15 12:00 a.m.•16 views

PT-2024-38643

Name of the Vulnerable Software and Affected Versions Xpdf versions 4.05 and earlier Description The issue is caused by a PDF object loop in a pattern resource, leading to infinite recursion and a stack overflow. This could allow attackers to crash the system or expose data. Recommendations For...

8.2CVSS4.5AI score0.00391EPSS
SaveExploits2References27
CNNVD
CNNVD
•added 2024/08/15 12:00 a.m.•17 views

Xpdf 安全漏洞

Xpdf is a free PDF viewer and toolkit from Xpdf, Inc. that includes a text extractor, image converter, HTML converter, and more. A security vulnerability exists in Xpdf version 4.05 and earlier versions, which stems from a page box with extremely large coordinates MediaBox, CropBox, etc. that may...

6.2CVSS6.6AI score0.00213EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/08/15 12:00 a.m.•15 views

PT-2024-38645

Name of the Vulnerable Software and Affected Versions Xpdf versions 4.05 and earlier Description The issue arises from invalid header information in a DCT JPEG stream, leading to an uninitialized variable in the DCT decoder. This can cause a segfault when attempting to read from an invalid addres...

8.5CVSS4.3AI score0.00391EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/15 12:00 a.m.•2 views

CVE-2024-7867: Divide By Zero

In Xpdf 4.05 and earlier, very large coordinates in a page box can cause an integer overflow and divide-by-zero...

6.2CVSS5.8AI score0.00213EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/15 12:00 a.m.•8 views

PT-2024-38644

Name of the Vulnerable Software and Affected Versions Xpdf versions 4.05 and earlier Description The issue arises when very large coordinates in a page box cause an integer overflow and divide-by-zero. Recommendations For Xpdf versions 4.05 and earlier, at the moment, there is no information abou...

8.2CVSS6.7AI score0.00391EPSS
SaveExploits2References26
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/15 12:00 a.m.•3 views

CVE-2024-7868: Use of Uninitialized Variable

In Xpdf 4.05 and earlier, invalid header info in a DCT JPEG stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes a segfault attempting to read from an invalid address...

8.2CVSS7.5AI score0.00391EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/15 12:00 a.m.•4 views

CVE-2024-7866: Uncontrolled Recursion

In Xpdf 4.05 and earlier, a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow...

5.5CVSS5.8AI score0.00217EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/15 9:15 p.m.•18 views

CVE-2024-4976

Out-of-bounds array write in Xpdf 4.05 and earlier, due to missing object type check in AcroForm field reference...

5.5CVSS6.8AI score0.00165EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/15 9:15 p.m.•19 views

CVE-2024-4976

Out-of-bounds array write in Xpdf 4.05 and earlier, due to missing object type check in AcroForm field reference...

5.5CVSS6.5AI score0.00165EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2024/05/15 9:15 p.m.•38 views

CVE-2024-4976

Out-of-bounds array write in Xpdf 4.05 and earlier, due to missing object type check in AcroForm field reference...

5.5CVSS5.9AI score0.00165EPSS
SaveExploits0References2
OSV
OSV
•added 2024/05/15 9:15 p.m.•16 views

UBUNTU-CVE-2024-4976

Out-of-bounds array write in Xpdf 4.05 and earlier, due to missing object type check in AcroForm field reference...

5.5CVSS5.8AI score0.00165EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/05/15 8:34 p.m.•22 views

CVE-2024-4976 Out-of-bounds array write in Xpdf 4.05 due to missing object type check

Out-of-bounds array write in Xpdf 4.05 and earlier, due to missing object type check in AcroForm field reference...

2.1CVSS6.9AI score0.00165EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2024/05/15 8:34 p.m.•85 views

CVE-2024-4976

Out-of-bounds array write in Xpdf 4.05 and earlier, due to missing object type check in AcroForm field reference...

5.5CVSS7.3AI score0.00165EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/15 8:34 p.m.•53 views

CVE-2024-4976 Out-of-bounds array write in Xpdf 4.05 due to missing object type check

Out-of-bounds array write in Xpdf 4.05 and earlier, due to missing object type check in AcroForm field reference...

2.1CVSS6.8AI score0.00165EPSS
SaveExploits0References1
Rows per page
Query Builder