320 matches found
NewStart CGSL CORE 5.05 / MAIN 5.05 : poppler Multiple Vulnerabilities (NS-SA-2019-0249)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has poppler packages installed that are affected by multiple vulnerabilities: - Poppler before 0.70.0 has a NULL pointer dereference in popplerattachmentnew when called from popplerannotfileattachmentgetattachment. CVE-2018-191...
DEBIAN-CVE-2010-0207
In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service application crash in xpdf-based PDF viewers...
CVE-2010-0207
In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service application crash in xpdf-based PDF viewers...
CVE-2010-0207
In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service application crash in xpdf-based PDF viewers...
CVE-2010-0207
In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service application crash in xpdf-based PDF viewers...
CVE-2010-0207
CVE-2010-0207 affects xpdf: the vulnerability arises in the xref table where an infinite loop can be triggered, allowing remote attackers to cause a denial of service (crash) in xpdf-based PDF viewers. The connected documents corroborate the root cause as an infinite loop in the xref table and th...
CVE-2010-0207: Loop with Unreachable Exit Condition
In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service application crash in xpdf-based PDF viewers...
PT-2019-6526
Name of the Vulnerable Software and Affected Versions xpdf affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in an application crash in xpdf-based PDF viewers, due to an infinite loop in the xref table. Recommendations At the...
CVE-2018-20662
In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing...
poppler: heap-based buffer over-read in XRef::getEntry in XRef.cc
In Poppler 0.73.0, a heap-based buffer over-read due to an integer signedness error in the XRef::getEntry function in XRef.cc allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted PDF document, as demonstrated by pdftocairo...
poppler: SIGABRT PDFDoc::setup class in PDFDoc.cc
In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing...
poppler security update
0.66.0-11.el80.12 - Ignore dict Length if it is broken - Resolves: 1741146 0.66.0-11.el80.11 - Check whether input is RGB in PSOutputDev::checkPageSlice - also when using '-optimizecolorspace' flag - Resolves: 1741145 0.66.0-11.el80.10 - Fail gracefully if not all components of JPEG2000Stream -...
CVE-2019-16088
Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc...
CVE-2019-16088
Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc...
UBUNTU-CVE-2019-16088
Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc...
CVE-2019-16088
Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc...
Design/Logic Flaw
Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc...
CVE-2019-16088
CVE-2019-16088 affects Xpdf 3.04, with a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc. The connected Nessus and PTSecurity entries describe later Xpdf issues (not this CVE) and do not provide a patch or remediation for 3.04. Exploitation sta...
