CVE-2018-8101

The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8102

The JBIG2MMRDecoder::getBlackCode function in JBIG2Stream.cc in xpdf 4.00 allows attackers to launch denial of service buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8104: Out-of-bounds Read

The BufStream::lookChar function in Stream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

PT-2018-18435

Name of the Vulnerable Software and Affected Versions: xpdf version 4.00 Description: The issue allows attackers to launch a denial of service, resulting in a heap-based buffer over-read and application crash, via a specific pdf file. This can be demonstrated using the pdftohtml tool...

PT-2018-18432

Name of the Vulnerable Software and Affected Versions: xpdf version 4.00 Description: The issue allows attackers to launch a denial of service, causing a heap-based buffer over-read and application crash, via a specific pdf file. This can be demonstrated using the pdftohtml tool. Recommendations:...

PT-2018-18429

Name of the Vulnerable Software and Affected Versions: xpdf version 4.00 Description: The issue allows attackers to launch a denial of service, causing a heap-based buffer overflow and application crash, or possibly have other unspecified impacts via a specific pdf file. This is demonstrated by t...

PT-2018-18434

Name of the Vulnerable Software and Affected Versions: xpdf version 4.00 Description: The issue allows attackers to launch a denial of service, resulting in a heap-based buffer over-read and application crash, via a specific pdf file. This can be demonstrated using the pdftohtml tool...

PT-2018-18436

Name of the Vulnerable Software and Affected Versions: xpdf version 4.00 Description: The issue allows attackers to launch a denial of service, resulting in a heap-based buffer over-read and application crash, via a specific pdf file. This can be demonstrated using the pdftohtml tool...

PT-2018-18433

Name of the Vulnerable Software and Affected Versions: xpdf version 4.00 Description: The issue allows attackers to launch a denial of service, resulting in a heap-based buffer over-read and application crash, via a specific pdf file. This can be demonstrated using the pdftohtml tool...

CVE-2018-8101: Out-of-bounds Read

The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

PT-2018-18431

Name of the Vulnerable Software and Affected Versions: xpdf version 4.00 Description: The issue allows attackers to launch a denial of service, causing a buffer over-read and application crash, via a specific pdf file. This can be demonstrated using the pdftohtml tool. Recommendations: For xpdf...

Null pointer dereference

A NULL pointer dereference in JPXStream::fillReadBuf in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml...

Cross site scripting

An out-of-bounds read in JPXStream::readTilePart in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml...

UBUNTU-CVE-2018-7453

Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop checking, as demonstrated by pdftohtml...

CVE-2018-7455

An out-of-bounds read in JPXStream::readTilePart in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-7452

A NULL pointer dereference in JPXStream::fillReadBuf in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-7452

A NULL pointer dereference in JPXStream::fillReadBuf in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-7454

A NULL pointer dereference in XFAForm::scanFields in XFAForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-7455

An out-of-bounds read in JPXStream::readTilePart in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml...

Code injection

Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop checking, as demonstrated by pdftohtml...