Lucene search
+L

33 matches found

OSV
OSV
•added 2019/07/04 10:15 p.m.•18 views

UBUNTU-CVE-2019-13291

In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan located at Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It might allow an attacker to cause Information Disclosure...

5.5CVSS6.2AI score0.01097EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2019/07/04 9:07 p.m.•55 views

CVE-2019-13291

In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan located at Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It might allow an attacker to cause Information Disclosure...

5.5AI score0.01097EPSS
SaveExploits1References1
CVE
CVE
•added 2019/07/04 9:07 p.m.•154 views

CVE-2019-13291

CVE-2019-13291 : In Xpdf 4.01.01, there is a heap-based buffer over-read in DCTStream::readScan() (Stream.cc). Triggered by processing a crafted PDF document via the pdftops tool, it may lead to information disclosure. Connected entries corroborate the same description. No remediation details are...

5.5CVSS5.5AI score0.01097EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/04 12:00 a.m.•4 views

CVE-2019-13291: Out-of-bounds Read

In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan located at Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It might allow an attacker to cause Information Disclosure...

5.5CVSS6AI score0.01097EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/07/04 12:00 a.m.•2 views

PT-2019-13242

Name of the Vulnerable Software and Affected Versions Xpdf version 4.01.01 Description The issue is a heap-based buffer over-read in the DCTStream::readScan function, located at Stream.cc. This can be triggered by sending a crafted PDF document to the pdftops tool, potentially allowing an attacke...

5.5CVSS0.01097EPSS
SaveExploits1References7
CNVD
CNVD
•added 2018/10/22 12:00 a.m.•17 views

Xpdf Denial of Service Vulnerability (CNVD-2019-17492)

Xpdf is Foo Labs developed an open source PDF reader , it supports decoding LZW compressed format files and read encrypted PDF files . Xpdf 4.00 version of the Stream.cc file in the 'DCTStream::readScan' function has a security vulnerability. Attackers can use the vulnerability to cause a denial ...

5.5CVSS6.7AI score0.01141EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2018/10/18 6:29 a.m.•43 views

CVE-2018-18457

The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

5.5CVSS6.1AI score0.01141EPSS
SaveExploits0References3
OSV
OSV
•added 2018/10/18 6:29 a.m.•15 views

DEBIAN-CVE-2018-18457

The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

5.5CVSS6.7AI score0.01141EPSS
SaveExploits0References1
OSV
OSV
•added 2018/10/18 6:29 a.m.•13 views

UBUNTU-CVE-2018-18457

The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

5.5CVSS5.8AI score0.01141EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2018/10/18 6:00 a.m.•47 views

CVE-2018-18457

The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

5.3AI score0.01141EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2018/10/18 6:00 a.m.•59 views

CVE-2018-18457

The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

5.5CVSS5.1AI score0.01141EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/18 12:00 a.m.•6 views

CVE-2018-18457: NULL Pointer Dereference

The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

5.5CVSS5.9AI score0.01141EPSS
SaveExploits0References2
Talos
Talos
•added 2017/07/07 12:00 a.m.•104 views

Poppler PDF Image Display DCTStream::readScan() Code Execution Vulnerability

Summary An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler-0.53.0. A specifically crafted pdf can cause an image resizing after allocation has already occurred, resulting in heap corruption which can lead to code execution. An attacker controlled PDF...

8.8CVSS8.4AI score0.02953EPSS
SaveExploits1
Rows per page
Query Builder