15 matches found
EUVD-2007-5368
Malware in sbrugna...
EUVD-2018-10186
Malware in sbrugna...
EUVD-2022-46120
Malicious code in bioql PyPI...
EUVD-2024-32701
Malicious code in bioql PyPI...
EUVD-2024-48719
Malicious code in bioql PyPI...
EUVD-2025-15084
Malicious code in bioql PyPI...
CVE-2024-4568
CVE-2024-4568 affects Xpdf 4.05 and earlier, where a PDF object loop in resources can cause infinite recursion and a stack overflow. The entry provides a local attack vector with low privileges and no user interaction, resulting in availability impact (A: High) per the NVD metrics. Fedora/NVD/rel...
CVE-2024-3248
In Xpdf 4.05 and earlier, a PDF object loop in the attachments leads to infinite recursion and a stack overflow...
CVE-2022-24107
Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc...
CVE-2022-38230
XPDF commit ffaf11c was discovered to contain a floating point exception FPE via DCTStream::decodeImage at /xpdf/Stream.cc...
MGASA-2020-0291 Updated xpdf packages fix security vulnerability
A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf 4.01.01. It can, for example, be triggered by sending crafted TrueType data in a PDF document to the pdftops tool. It might allow an attacker to cause Denial of Service or leak memory data into dump...
Heap overflow
The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...
iDEFENSE Security Advisory 01.18.05 - Multiple Unix/Linux Vendor Xpdf makeFileKey2 Stack Overflow
Multiple Unix/Linux Vendor Xpdf makeFileKey2 Stack Overflow iDEFENSE Security Advisory 01.18.05 www.idefense.com/application/poi/display?id=186&type=vulnerabilities January 18, 2005 I. BACKGROUND Xpdf is an open-source viewer for PDF files. More information is available at the following site:...
[SECURITY] [DSA 581-1] New xpdf packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 581-1 [email protected] http://www.debian.org/security/ Martin Schulze November 2nd, 2004 http://www.debian.org/security/faq -...
CVE-2000-0727
CVE-2000-0727 affects the xpdf PDF viewer client older than 0.91. The flaw: when handling embedded URLs, the client does not correctly launch a web browser, enabling an attacker to execute arbitrary commands via a URL containing shell metacharacters. NVD assigns a base CVSS v2.0 score of 7.6 (HIG...