3133 matches found
CVE-2022-33108
XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...
CVE-2022-33108
XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...
Stack overflow
XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...
CVE-2022-33108
XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...
UBUNTU-CVE-2022-33108
XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...
CVE-2022-33108
CVE-2022-33108 affects XPDF 4.04; the vulnerability is a stack overflow in Object::Copy (object.cc). Exploitation details are not described beyond this, but multiple advisories indicate updated packages are required (e.g., XPDF >= 4.05) to fix these issues. Connected sources corroborate the CV...
CVE-2022-33108
XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...
CVE-2022-33108
XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...
CVE-2022-33108
XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...
Xpdf 缓冲区错误漏洞
Xpdf is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. Xpdf v4.04 there is a security vulnerability , the vulnerability stems from the PDF file caused by object loops...
PT-2022-21694 · Xpdf +1 · Xpdf +1
Name of the Vulnerable Software and Affected Versions: XPDF version 4.04 Description: A stack overflow issue was discovered in XPDF via the Object::Copy class of object.cc files. Recommendations: For XPDF version 4.04, at the moment, there is no information about a newer version that contains a f...
CVE-2018-7455
An out-of-bounds read in JPXStream::readTilePart in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml...
CVE-2019-12957
In Xpdf 4.01.01, a buffer over-read could be triggered in FoFiType1C::convertToType1 in fofi/FoFiType1C.cc when the index number is larger than the charset array bounds. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It allows an attacker to use a crafted...
CVE-2019-13287
In Xpdf 4.01.01, there is an out-of-bounds read vulnerability in the function SplashXPath::strokeAdjust located at splash/SplashXPath.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure. This is...
CVE-2018-16369
XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service stack consumption via a crafted pdf file, related to AcroForm::scanField, as demonstrated by pdftohtml. NOTE: this might overlap CVE-2018-7453...
CVE-2019-9589
There is a NULL pointer dereference vulnerability in PSOutputDev::setupResources located in PSOutputDev.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to for example the pdftops binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have...
CVE-2018-18650
An issue was discovered in Xpdf 4.00. XRef::readXRefStream in XRef.cc allows attackers to launch a denial of service Integer Overflow via a crafted /Size value in a pdf file, as demonstrated by pdftohtml. This is mainly caused by the program attempting a malloc operation for a large amount of...
CVE-2019-14291
An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA==6 case 3...
Xpdf Denial of Service Vulnerability
Xpdf is a free PDF reader that supports multiple operating systems. Xpdf version 4.03 has a denial of service vulnerability that stems from the presence of a null pointer dereference in the XFAScanner::scanNode function in XFAScanner.cc. An attacker could exploit this vulnerability to cause a...