CVE-2020-23874

CVE-2020-23874 affects pdf2xml version 2.0, with a heap-buffer overflow in TextPage::addAttributsNode. Multiple sources (NVD, CNVD, OSV, RH) describe the same flaw; CVSS v3.1 vector: NETWORK, LOW attack complexity, NONE privileges, with high impact on confidentiality, integrity, and availability ...

CVE-2020-23872

CVE-2020-23872 affects pdf2xml v2.0. The vulnerability is a null pointer dereference in TextPage::restoreState, which can be exploited to cause a denial of service. Connected sources (CNVD/CNVD-derived, Red Hat, OSV, CNVD, CNVD-like feeds) corroborate the same description. There is no detail in t...

CVE-2020-23873

CVE-2020-23873 concerns pdf2xml v2.0, which has a reported heap-buffer overflow in the function TextPage::dump() . The vulnerability affects pdf2xml version 2.0 and is described with a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no privileges required, and no user interacti...

CVE-2020-23873

pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump...

Pdf2xml 代码问题漏洞

pdftoxml is an open source PDF to XML converter. pdftoxml version 2.0 of the TextPage::restoreState function has a null pointer dereference vulnerability. An attacker can exploit this vulnerability to cause a denial of service...

Pdf2xml 缓冲区错误漏洞

pdftoxml is an open source PDF to XML converter. pdftoxml version 2.0 of the TextPage::addAttributsNode function has a heap buffer overflow vulnerability. No detailed vulnerability details are currently available...

[ASA-201910-10] xpdf: arbitrary code execution

Arch Linux Security Advisory ASA-201910-10 ========================================== Severity: Medium Date : 2019-10-16 CVE-ID : CVE-2019-16927 Package : xpdf Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1048 Summary ======= The package xpdf before versio...

FreeBSD : Xpdf -- Multiple Vulnerabilities (791e8f79-e7d1-11e9-8b31-206a8a720317)

Xpdf 4.02 fixes two vulnerabilities. Both fixes have been backported to 3.04. An invalid memory access vulnerability in TextPage::findGaps in Xpdf 4.01 through a crafted PDF document can cause a segfault. An out of bounds write exists in TextPage::findGaps of Xpdf 4.01.01 C Tenable Network...

Updated xpdf packages fix security vulnerabilities

The updated xpdf packages fix security vulnerabilities: An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpIdiv case. CVE-2019-10018 An issue was discovered in Xpdf 4.01.01. There is an FPE in the function...

Xpdf -- Multiple Vulnerabilities

Xpdf 4.02 fixes two vulnerabilities. Both fixes have been backported to 3.04. An invalid memory access vulnerability in TextPage::findGaps in Xpdf 4.01 through a crafted PDF document can cause a segfault. An out of bounds write exists in TextPage::findGaps of Xpdf 4.01.01...

CVE-2019-16927

Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877...

Out-of-bounds

Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877...

CVE-2019-16927

Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877...

UBUNTU-CVE-2019-16927

Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877...

CVE-2019-16927

CVE-2019-16927 affects Xpdf 4.01.01. The vulnerability is an out-of-bounds write in the TextPage::findGaps function (TextOutputDev.cc, vertProfile path). The issue is triggered by a crafted PDF document and is described across multiple sources as a vulnerability in Xpdf 4.01.01 distinct from CVE-...

Design/Logic Flaw

There is an invalid memory access vulnerability in the function TextPage::findGaps located at TextOutputDev.c in Xpdf 4.01, which can for example be triggered by sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have...

CVE-2019-9877

There is an invalid memory access vulnerability in the function TextPage::findGaps located at TextOutputDev.c in Xpdf 4.01, which can for example be triggered by sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have...

UBUNTU-CVE-2019-9877

There is an invalid memory access vulnerability in the function TextPage::findGaps located at TextOutputDev.c in Xpdf 4.01, which can for example be triggered by sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have...

Xpdf Invalid Memory Access Vulnerability

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. An invalid memory access vulnerability exists in the TextPage::findGaps function in TextOutputDev.c in Xpdf 4.01. An attacker can exploit this vulnerability by sending a specially craft...

pdfalto buffer overflow vulnerability

Pdfalto is a command-line tool for parsing PDF files and generate XML structured content in ALTO format. A heap buffer overflow vulnerability exists in the 'TextPage::addAttributsNode' function in the XmlAltoOutputDev.cc file in Pdfalto version 0.2, which can be exploited by an attacker to execut...