3125 matches found
XPDF 代码问题漏洞
XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF commit id ffaf11c has a security vulnerability that stems from DCTStream::readMCURow in /xpdf/Stream.cc contains a segmentation violation...
PT-2022-24297 · Xpdf · Xpdf
Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A heap-buffer overflow issue was discovered in XPDF, specifically via the DCTStream::transformDataUnit function at /xpdf/Stream.cc. Recommendations: At the moment, there is no information abou...
PT-2022-24298 · Xpdf · Xpdf
Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A heap-buffer overflow issue was discovered in XPDF, specifically via the DCTStream::readHuffSymDCTHuffTable function at /xpdf/Stream.cc. Recommendations: At the moment, there is no informatio...
XPDF 缓冲区错误漏洞
XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF has a buffer error vulnerability that originates from DCTStream::getChar in /xpdf/Stream.cc contains a heap buffer overflow...
PT-2022-24305 · Xpdf · Xpdf
Name of the Vulnerable Software and Affected Versions: XPDF version ffaf11c Description: A global-buffer overflow issue was discovered in XPDF via the Lexer::getObjObject function at /xpdf/Lexer.cc. This issue can be exploited, potentially leading to unintended consequences. Recommendations: For...
PT-2022-24303 · Xpdf · Xpdf
Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A segmentation violation was discovered in XPDF via the Lexer::getObjObject function at /xpdf/Lexer.cc. This issue was identified in XPDF commit ffaf11c. Recommendations: At the moment, there ...
CVE-2022-38222
There is a use-after-free issue in JBIG2Stream::close located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to for example the pdfimages binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact...
CVE-2022-38222
CVE-2022-38222 affects Xpdf 4.04, with a use-after-free in JBIG2Stream::close() (JBIG2Stream.cc). Triggered by sending a crafted PDF to pdfimages, it allows Denial of Service and possibly other impact. Public sources in the connected documents confirm the vulnerability and indicate fixes in later...
CVE-2022-38222
There is a use-after-free issue in JBIG2Stream::close located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to for example the pdfimages binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact...
PT-2022-24294 · Xpdf +1 · Xpdf +1
Name of the Vulnerable Software and Affected Versions: Xpdf version 4.04 Description: The issue is related to a use-after-free problem in the JBIG2Stream::close function, located in the JBIG2Stream.cc file. This can be triggered by sending a crafted PDF file to the pdfimages binary, for example. ...
PT-2022-7283 · Xpdf +1 · Xpdf +1
Name of the Vulnerable Software and Affected Versions: Xpdf version 4.0.4 Description: The issue exists due to insufficient input validation in the /xpdf/AcroForm.cc:538 component of the Xpdf software, which can lead to a segmentation violation. Exploitation of this issue may allow an attacker to...
CVE-2022-33108
XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...
CVE-2022-33108
XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...
CVE-2022-33108
XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...
Stack overflow
XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...
CVE-2022-33108
XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...
UBUNTU-CVE-2022-33108
XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...
CVE-2022-33108
CVE-2022-33108 affects XPDF 4.04; the vulnerability is a stack overflow in Object::Copy (object.cc). Exploitation details are not described beyond this, but multiple advisories indicate updated packages are required (e.g., XPDF >= 4.05) to fix these issues. Connected sources corroborate the CV...
