XPDF code issue vulnerabilities

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF commit id ffaf11c has a security vulnerability that stems from DCTStream::readMCURow in /xpdf/Stream.cc contains a segmentation violation...

PT-2022-24300 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF version ffaf11c Description: A floating point exception FPE was discovered in XPDF via the DCTStream::decodeImage function at /xpdf/Stream.cc. Recommendations: For XPDF version ffaf11c, consider applying a patch or fix to resolve the...

CVE-2022-35108: NULL Pointer Dereference

SWFTools commit 772e55a2 was discovered to contain a segmentation violation via DCTStream::getChar at /xpdf/Stream.cc...

CVE-2022-38238: Out-of-bounds Write

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar at /xpdf/Stream.cc...

PT-2022-24298 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A heap-buffer overflow issue was discovered in XPDF, specifically via the DCTStream::readHuffSymDCTHuffTable function at /xpdf/Stream.cc. Recommendations: At the moment, there is no informatio...

CVE-2022-38229: Out-of-bounds Write

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSymDCTHuffTable at /xpdf/Stream.cc...

SWFTools buffer error vulnerability

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that originates from a heap buffer overflow in DCTStream::reset in the /xpdf/Stream.cc file...

CVE-2022-38231: Out-of-bounds Write

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar at /xpdf/Stream.cc...

SWFTools code-related vulnerabilities

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A code issue vulnerability exists in SWFTools that stems from a segmentation violation in DCTStream::getChar in the /xpdf/Stream.cc file...

CVE-2022-38235: Improper Check for Unusual or Exceptional Conditions

XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar at /xpdf/Stream.cc...

CVE-2022-38233: Improper Check for Unusual or Exceptional Conditions

XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::readMCURow at /xpdf/Stream.cc...

PT-2022-24297 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A heap-buffer overflow issue was discovered in XPDF, specifically via the DCTStream::transformDataUnit function at /xpdf/Stream.cc. Recommendations: At the moment, there is no information abou...

PT-2022-24306

Name of the Vulnerable Software and Affected Versions XPDF affected versions not specified Description A heap-buffer overflow was discovered in XPDF via the DCTStream::readScan function at /xpdf/Stream.cc. This issue affects XPDF commit ffaf11c. Recommendations At the moment, there is no...

PT-2022-24304 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A segmentation violation was discovered in XPDF via the DCTStream::getChar function at /xpdf/Stream.cc. This issue affects the DCTStream::getChar function, which is located in the...

XPDF buffer error vulnerability

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF has a buffer error vulnerability that originates from DCTStream::readHuffSymDCTHuffTable in /xpdf/Stream.cc contains a heap buffer overflow...

Modesty Pdf2json resource management error vulnerability

Modesty Pdf2json is Modesty's personal developer of a Java-based code library that interacts PDF files with Json files. PDF2JSON version 0.70 has a security vulnerability that stems from an issue found in the function DCTStream::transformDataUnit, which could be used by an attacker to cause a...

Modesty Pdf2json Buffer Overflow Vulnerability (CNVD-2021-57788)

Modesty Pdf2json is Modesty's personal developer of a Java-based code library that interacts PDF files with Json files. PDF2JSON version 0.70 has a security vulnerability that stems from an issue found in the function DCTStream::decodeImage, which could be used by an attacker to cause a a denial ...

Modesty Pdf2json code issue vulnerability

Modesty Pdf2json is a Java-based code library from Modesty's personal developer that allows PDF files to interact with Json files. PDF2JSON version 0.70 has a security vulnerability that stems from an issue found in the function DCTStream::getChar, which could be used by an attacker to cause a...

PDF2JSON DCTStream::decodeImage Denial of Service Vulnerability

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. PDF2JSON DCTStream::decodeImage suffers from a denial of service vulnerability. The vulnerability stems from a floating-point exception. An attacker could exploit this...

PDF2JSON DCTStream::readHuffSym Denial of Service Vulnerability

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. PDF2JSON DCTStream::readHuffSym suffers from a denial of service vulnerability. The vulnerability stems from an invalid read of size 2. An attacker could exploit this...