CVE-2020-19470: NULL Pointer Dereference

An issue has been found in function DCTStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a NULL pointer dereference invalid read of size 1...

PT-2021-10358

Name of the Vulnerable Software and Affected Versions: PDF2JSON version 0.70 Description: The issue is related to the function DCTStream::decodeImage and allows attackers to cause a Denial of Service due to an uncaught floating point exception. Recommendations: For PDF2JSON version 0.70, consider...

Modesty Pdf2json Buffer Error Vulnerability

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. A denial of service vulnerability exists in PDF2JSON DCTStream::transformDataUnit. The vulnerability stems from an invalid read of size 4. An attacker could exploit this...

Modesty Pdf2json Buffer Error Vulnerability

Modesty Pdf2json is Modesty's personal developer of a Java-based code library that interacts PDF files with Json files. PDF2JSON version 0.70 has a security vulnerability that stems from an issue found in the function DCTStream::decodeImage, which could be used by an attacker to cause a a denial ...

PDF2JSON code issue vulnerabilities

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. PDF2JSON DCTStream::decodeImage suffers from a denial of service vulnerability. The vulnerability stems from a floating-point exception. An attacker could exploit this...

CVE-2020-19469: Out-of-bounds Write

An issue has been found in function DCTStream::reset in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 8...

Modesty Pdf2json Resource Management Error Vulnerability

Modesty Pdf2json is Modesty's personal developer of a Java-based code library that interacts PDF files with Json files. PDF2JSON version 0.70 has a security vulnerability that stems from an issue found in the function DCTStream::transformDataUnit, which could be used by an attacker to cause a...

Modesty Pdf2json Buffer Error Vulnerability

Modesty Pdf2json is Modesty's personal developer of a Java-based code library that allows PDF files to interact with Json files. PDF2JSON version 0.70 has a security vulnerability that stems from a problem found in the function DCTStream::reset, through which an attacker could cause a denial of...

Poppler buffer overflow vulnerability (CNVD-2021-44697)

Poppler is based on xpdf-3.0 code base PDF rendering library. A heap buffer overflow vulnerability exists in DCTStream::getChars in Poppler 20.12.1 in DCTStream.cc, which can be exploited by an attacker to cause a heap buffer overflow via a specially crafted PDF document...

CVE-2020-35702

DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document. NOTE: later reports indicate that this only affects builds from Poppler git clones in late December 2020, not the 20.12.1 release. In this situation, it should NOT be considered a...

CVE-2020-35702

DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document. NOTE: later reports indicate that this only affects builds from Poppler git clones in late December 2020, not the 20.12.1 release. In this situation, it should NOT be considered a...

ALPINE-CVE-2020-35702

DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document. NOTE: later reports indicate that this only affects builds from Poppler git clones in late December 2020, not the 20.12.1 release. In this situation, it should NOT be considered a...

Heap overflow

DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document. NOTE: later reports indicate that this only affects builds from Poppler git clones in late December 2020, not the 20.12.1 release. In this situation, it should NOT be considered a...

CVE-2020-35702

DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document. NOTE: later reports indicate that this only affects builds from Poppler git clones in late December 2020, not the 20.12.1 release. In this situation, it should NOT be considered a...

CVE-2020-35702

DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document. NOTE: later reports indicate that this only affects builds from Poppler git clones in late December 2020, not the 20.12.1 release. In this situation, it should NOT be considered a...

CVE-2020-35702

The CVE-2020-35702 entry corresponds to a heap-based buffer overflow in Poppler’s DCTStream::getChars (DCTStream.cc) when processing crafted PDFs. Affected release per public advisories is Poppler 20.12.1, with Arch Linux ASA noting arbitrary code execution is possible and that upstream fixed the...

CVE-2020-35702

DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document. NOTE: later reports indicate that this only affects builds from Poppler git clones in late December 2020, not the 20.12.1 release. In this situation, it should NOT be considered a...

CVE-2020-35702

DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document. NOTE: later reports indicate that this only affects builds from Poppler git clones in late December 2020, not the 20.12.1 release. In this situation, it should NOT be considered a...

PT-2020-17392 · Poppler · Poppler

Name of the Vulnerable Software and Affected Versions: Poppler versions prior to 20.12.1 Description: The issue is related to a heap-based buffer overflow in the DCTStream::getChars function in DCTStream.cc, which can be triggered by a crafted PDF document. This affects builds from Poppler git...

CVE-2020-35702: Out-of-bounds Write

DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document. NOTE: later reports indicate that this only affects builds from Poppler git clones in late December 2020, not the 20.12.1 release. In this situation, it should NOT be considered a...