Lucene search
K

19 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:57 a.m.1 views

CVE-2022-38237

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan at /xpdf/Stream.cc...

7.8CVSS7.5AI score0.00054EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2023/02/15 4:22 a.m.2 views

SUSE CVE-2018-18457

The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

5.5CVSS6.8AI score0.00215EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:10 a.m.1 views

SUSE CVE-2019-13291

In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan located at Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It might allow an attacker to cause Information Disclosure...

5.5CVSS7AI score0.00245EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:24 a.m.2 views

SUSE CVE-2022-38237

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan at /xpdf/Stream.cc...

7.8CVSS7.6AI score0.00054EPSS
Exploits1References3
OSV
OSV
added 2022/08/16 9:15 p.m.0 views

CVE-2022-38237

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan at /xpdf/Stream.cc...

7.8CVSS5.8AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/16 9:15 p.m.0 views

CVE-2022-38237

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan at /xpdf/Stream.cc...

7.8CVSS5.8AI score0.00054EPSS
Exploits1References2
Prion
Prion
added 2022/08/16 9:15 p.m.9 views

Heap overflow

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan at /xpdf/Stream.cc...

4.4CVSS7.8AI score0.00054EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/08/16 12:0 a.m.2 views

XPDF 缓冲区错误漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF commit id ffaf11c has a security vulnerability that originates from DCTStream::readScan in /xpdf/Stream.cc contains a heap buffer overflow...

7.8CVSS7.8AI score0.00054EPSS
Exploits1References2
CNVD
CNVD
added 2019/07/05 12:0 a.m.1 views

Xpdf heap buffer overflow vulnerability (CNVD-2019-21459)

Xpdf is an open source PDF reader from Foo Labs. The product supports decoding LZW compressed format files and read encrypted PDF files. A buffer overflow vulnerability exists in the 'DCTStream::readScan' function of the Stream.cc file in Xpdf version 4.01.01. The vulnerability stems from a...

5.5CVSS7.4AI score0.00245EPSS
Exploits1References1
OSV
OSV
added 2019/07/04 10:15 p.m.1 views

CVE-2019-13291

In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan located at Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It might allow an attacker to cause Information Disclosure...

5.5CVSS6.2AI score0.00245EPSS
Exploits1References1
NVD
NVD
added 2019/07/04 10:15 p.m.17 views

CVE-2019-13291

In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan located at Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It might allow an attacker to cause Information Disclosure...

5.5CVSS5.5AI score0.00245EPSS
Exploits1References1
OSV
OSV
added 2019/07/04 10:15 p.m.2 views

UBUNTU-CVE-2019-13291

In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan located at Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It might allow an attacker to cause Information Disclosure...

5.5CVSS6.2AI score0.00245EPSS
Exploits1References3
Cvelist
Cvelist
added 2019/07/04 9:7 p.m.16 views

CVE-2019-13291

In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan located at Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It might allow an attacker to cause Information Disclosure...

5.5AI score0.00245EPSS
Exploits1References1
CVE
CVE
added 2019/07/04 9:7 p.m.123 views

CVE-2019-13291

CVE-2019-13291 : In Xpdf 4.01.01, there is a heap-based buffer over-read in DCTStream::readScan() (Stream.cc). Triggered by processing a crafted PDF document via the pdftops tool, it may lead to information disclosure. Connected entries corroborate the same description. No remediation details are...

5.5CVSS5.5AI score0.00245EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2018/10/22 12:0 a.m.1 views

Xpdf Denial of Service Vulnerability (CNVD-2019-17492)

Xpdf is Foo Labs developed an open source PDF reader , it supports decoding LZW compressed format files and read encrypted PDF files . Xpdf 4.00 version of the Stream.cc file in the 'DCTStream::readScan' function has a security vulnerability. Attackers can use the vulnerability to cause a denial ...

5.5CVSS6.7AI score0.00215EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2018/10/18 6:29 a.m.14 views

CVE-2018-18457

The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

5.5CVSS6.1AI score0.00215EPSS
Exploits0References3
OSV
OSV
added 2018/10/18 6:29 a.m.1 views

DEBIAN-CVE-2018-18457

The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

5.5CVSS6.7AI score0.00215EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2018/10/18 6:0 a.m.15 views

CVE-2018-18457

The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

5.5CVSS5.1AI score0.00215EPSS
Exploits0
Cvelist
Cvelist
added 2018/10/18 6:0 a.m.15 views

CVE-2018-18457

The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

5.3AI score0.00215EPSS
Exploits0References2
Rows per page
Query Builder