3473 matches found
CVE-2024-2971 Out-of-bounds array access due to negative object numbers in indirect references in Xpdf 4.05
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file...
CVE-2024-2971
Xpdf vulnerability CVE-2024-2971 affects Xpdf 4.05 and earlier, caused by an out-of-bounds write in an array triggered by a negative object number in an indirect reference in the input PDF. Fedora advisories and security notes indicate update to 4.06 as the fix. If exploiting, the issue could imp...
CVE-2024-2971
Removed by vendor...
CVE-2024-2971
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file...
CVE-2024-2971: Out-of-bounds Write
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file...
PT-2024-22965
Name of the Vulnerable Software and Affected Versions Xpdf versions 4.05 and earlier Description The issue is an out-of-bounds array write in Xpdf, triggered by a negative object number in an indirect reference in the input PDF file. This occurs when the software processes a PDF file containing a...
Xpdf 缓冲区错误漏洞
Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. Xpdf has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...
Vulnerability of the software component /xpdf/AcroForm.cc:538 for PDF viewing, Xpdf, which allows a hacker to trigger a service failure
Vulnerability of the software component /xpdf/AcroForm.cc:538 for PDF viewing with Xpdf exists due to insufficient validation of input data. Exploitation of this vulnerability may allow attackers to cause service failures...
The vulnerability of the XRef::fetch() function in PDF viewing software, Xpdf, allows a malicious actor to cause an unexpected termination of the application.
The vulnerability of the XRef::fetch function xpdf/XRef.cc in PDF viewing software like Xpdf is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause the application to terminate abnormally...
Mageia: Security Advisory (MGASA-2024-0035)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Slackware: Security Advisory (SSA:2024-040-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated xpdf packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Logic bug in text extractor led to invalid memory access. CVE-2022-30524 Integer overflow in rasterizer. CVE-2022-30775 PDF object loop in Catalog::countPageTree. CVE-2022-33108 PDF object loop in AcroForm::scanField. CVE-2022-36561 Logic bug in...
[slackware-security] xpdf
New xpdf packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xpdf-4.05-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Fixed a bug in the ICCBased color space parser that was...
Slackware Linux 15.0 / current xpdf Multiple Vulnerabilities (SSA:2024-040-01)
The version of xpdf installed on the remote host is prior to 4.05. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-040-01 advisory. - XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service stack consumption via a crafted pdf...
SUSE SLES12 Security Update : poppler (SUSE-SU-2023:4546-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4546-1 advisory. - CVE-2019-9545: Fixed a potential crash due to uncontrolled recursion in the JBIG parser bsc1128114. - CVE-2019-9631: Fixed an out...
The vulnerability of the Catalog::findDestInTree() function in PDF viewing software called Xpdf, which allows a hacker to cause a service failure.
The vulnerability of the Catalog::findDestInTree function in PDF viewing software called Xpdf is related to an uncontrolled recursion. Exploiting this vulnerability allows attackers to cause service failures...
openSUSE 15 Security Update : poppler (SUSE-SU-2023:4187-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4187-1 advisory. - CVE-2019-13287: Fixed an out-of-bounds read vulnerability in the function SplashXPath:strokeAdjust. bsc1140745 - CVE-2018-18456: Fixed a stack-base...
SUSE CVE-2022-48545
An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02...
