CVE-2018-8106

The JPXStream::readTilePartData function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8107

The JPXStream::close function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8101

The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8105

The JPXStream::fillReadBuf function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8107

The JPXStream::close function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8103

The CVE-2018-8103 issue affects xpdf 4.00 (JBIG2Stream::readGenericBitmap in JBIG2Stream.cc). A crafted PDF can trigger a heap-based buffer over-read, leading to application crash (denial of service). The vulnerability is demonstrated by pdftohtml. No patch/firmware details are provided in the co...

CVE-2018-8107

The CVE-2018-8107 entry concerns xpdf 4.00: the JPXStream::close function in JPXStream.cc is vulnerable, enabling a heap-based buffer over-read that can cause an application crash (denial of service) when processing a crafted PDF, as demonstrated by pdftohtml. Affected component: JPXStream::close...

CVE-2018-8105

The CVE-2018-8105 entry concerns xpdf 4.00, where the JPXStream::fillReadBuf function in JPXStream.cc can trigger a denial of service via a crafted PDF, caused by a heap-based buffer over-read that leads to application crash. The vulnerability is demonstrated by the pdftohtml tool. Connected sour...

CVE-2018-8101

The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8101

The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8103

The JBIG2Stream::readGenericBitmap function in JBIG2Stream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8106

The JPXStream::readTilePartData function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8107

The JPXStream::close function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8105

The JPXStream::fillReadBuf function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

PT-2018-18435

Name of the Vulnerable Software and Affected Versions: xpdf version 4.00 Description: The issue allows attackers to launch a denial of service, resulting in a heap-based buffer over-read and application crash, via a specific pdf file. This can be demonstrated using the pdftohtml tool...

PT-2018-18434

Name of the Vulnerable Software and Affected Versions: xpdf version 4.00 Description: The issue allows attackers to launch a denial of service, resulting in a heap-based buffer over-read and application crash, via a specific pdf file. This can be demonstrated using the pdftohtml tool...

PT-2018-18436

Name of the Vulnerable Software and Affected Versions: xpdf version 4.00 Description: The issue allows attackers to launch a denial of service, resulting in a heap-based buffer over-read and application crash, via a specific pdf file. This can be demonstrated using the pdftohtml tool...

PT-2018-18433

Name of the Vulnerable Software and Affected Versions: xpdf version 4.00 Description: The issue allows attackers to launch a denial of service, resulting in a heap-based buffer over-read and application crash, via a specific pdf file. This can be demonstrated using the pdftohtml tool...

CVE-2018-8101: Out-of-bounds Read

The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

PT-2018-18430

Name of the Vulnerable Software and Affected Versions: xpdf version 4.00 Description: The issue allows attackers to launch a denial of service via a specific pdf file, resulting in a heap-based buffer over-read and application crash. This can be achieved by exploiting the...