3133 matches found
CVE-2019-13288-POC
CVE-2019-13288-POC xpdf/install/bin/pdftotext ./poc.pdf Xpdf 4.01.01에서 Parser.cc의 Parser::getObj 함수는 조작된 파일을 통해 무한 재귀를 일으킬 수 있습니다. 원격 공격자는 이를 이용해 DoS 공격을 수행할 수 있습니다. 이는 CVE-2018-16646과 유사합니다...
CVE-2019-13288
CVE-2019-13288 – Xpdf의 Parser::getObj 무한 재귀 개요 CVE-2019-13288 은 Xpdf 버전 4.01.01 에서 발견된 취약점으로, 특히 Parser.cc의 Parser::getObj 함수에 존재합니다. 이 결함은 특수하게 조작된 PDF 파일을 처리할 때 무한 재귀 를 유발하여 서비스 거부DoS 상태를 초래할 수 있습니다. 이 취약점은 CVE-2018-16646 과 유사하며, 재귀 함수에서 강력한 입력 검증의 중요성을 강조합니다. 기술 세부 정보 CVE ID : CVE-2019-13288 영...
CVE-2019-13288
Xpdf version 4.02 2019-sep-25 The Xpdf software and documentation are copyright 1996-2019 Glyph & Cog, LLC. Email: [email protected] WWW: http://www.xpdfreader.com/ The PDF data structures, operators, and specification are documented in ISO 32000-2:2017. What is Xpdf? Xpdf is an open source...
CVE-2026-85458
A flaw was found in Xpdf. This vulnerability, a divide-by-zero error, occurs when the application processes a Type 3 font glyph that has a zero height. A local attacker could exploit this condition to trigger a crash, leading to a denial of service and making the application unavailable. Mitigati...
xpdf-docker
Xpdf Docker 이미지 이 저장소에는 CVE-2022-30524에 취약한 Xpdf 버전 4.04용 Docker 이미지가 포함되어 있습니다. 이미지 빌드하기 📦 이 저장소는 다음 3가지 변형으로 이미지를 제공합니다: bullseye/gcc : Debian "bullseye", gcc로 빌드됨 bullseye/afl : Debian "bullseye", afl-clang-fast++로 빌드됨 디버그 프로파일 focal/afl : Ubuntu 20.04 LTS Focal Fossa, afl-clang-fast++로 빌드됨 디버...
CVE-2026-85458
Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...
UBUNTU-CVE-2026-85458
Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...
CVE-2026-85458
Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...
CVE-2026-85458 Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyph
Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...
CVE-2026-85458
CVE-2026-85458 is a divide-by-zero vulnerability in Xpdf 4.06 (and earlier) triggered when a Type 3 font contains a glyph with a zero height . The bug causes a low-availability impact, rated CVSS 4.0 base score 2.1 (LOW) with a local attack vector and high complexity. No exploitation or in-the-wi...
EUVD-2026-70735
Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...
CVE-2026-85458
Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...
SUSE CVE-2023-26930
Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Vendor states “it's an expected abort on out-of-memory error.”...
Linux Distros Unpatched Vulnerability : CVE-2026-4407
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the N field in ICCBased color spaces. CVE-2026-4407 Note that Nessus relies o...
EUVD-2026-12995
Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...
CVE-2026-4407
Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...
CVE-2026-4407
Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...
UBUNTU-CVE-2026-4407
Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...
CVE-2026-4407
The CVE-2026-4407 issue affects Xpdf 4.06 and earlier, caused by an out-of-bounds array write stemming from incorrect validation of the “N” field in ICCBased color spaces. The vulnerability is rooted in input validation for ICCBased color space handling, leading to potential memory access issues....