Lucene search
+L

3133 matches found

Veracode
Veracode
added 2021/04/29 1:41 p.m.34 views

Stack Consumption

xpdf is vulnerable to stack consumption. The vulnerability exists due to an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp function...

7.5CVSS3.6AI score0.02057EPSS
SaveExploits1References6Affected Software1
Veracode
Veracode
added 2021/04/29 12:51 p.m.28 views

Denial Of Service (DoS)

Xpdf is vulnerable to denial of service. It is trying to use the freed t3GlyphStack-cache, which causes an heap-use-after-free problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to another char in the same Type 3 font...

5.5CVSS2.6AI score0.01005EPSS
SaveExploits1References7Affected Software1
Mageia
Mageia
added 2021/03/04 4:53 p.m.55 views

Updated xpdf packages fix security vulnerabilities

In Xpdf 4.02, SplashOutputDev::endType3CharGfxState state SplashOutputDev.cc:3079 is trying to use the freed t3GlyphStack-cache, which causes an heap-use-after-free problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to...

7.5CVSS1.3AI score0.02057EPSS
SaveExploits2References2
OSV
OSV
added 2021/03/04 4:53 p.m.11 views

MGASA-2021-0112 Updated xpdf packages fix security vulnerabilities

In Xpdf 4.02, SplashOutputDev::endType3CharGfxState state SplashOutputDev.cc:3079 is trying to use the freed t3GlyphStack-cache, which causes an heap-use-after-free problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to...

7.5CVSS6.6AI score0.02057EPSS
SaveExploits2References3
Fedora
Fedora
added 2021/02/11 1:43 a.m.81 views

[SECURITY] Fedora 33 Update: xpdf-4.03-1.fc33

Xpdf is an X Window System based viewer for Portable Document Format PDF files. Xpdf is a small and efficient program which uses standard X fonts...

7.5CVSS1.8AI score0.02057EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2021/02/11 12:00 a.m.20 views

Fedora: Security Advisory for xpdf (FEDORA-2021-013d9a30e0)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/02/11 12:00 a.m.28 views

Fedora 33 : 1:xpdf (2021-013d9a30e0)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-013d9a30e0 advisory. - In Xpdf 4.02, SplashOutputDev::endType3CharGfxState state SplashOutputDev.cc:3079 is trying to use the freed t3GlyphStack-cache, which causes an...

7.5CVSS6.3AI score0.02057EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2021/02/11 12:00 a.m.25 views

Fedora: Security Advisory for xpdf (FEDORA-2021-4a437fe032)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/02/11 12:00 a.m.34 views

Fedora 32 : 1:xpdf (2021-4a437fe032)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-4a437fe032 advisory. - In Xpdf 4.02, SplashOutputDev::endType3CharGfxState state SplashOutputDev.cc:3079 is trying to use the freed t3GlyphStack-cache, which causes an...

7.5CVSS6.3AI score0.02057EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2021/01/20 12:00 a.m.37 views

EulerOS 2.0 SP3 : poppler (EulerOS-SA-2021-1112)

According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf 4.01.01. It can, for example, be triggered by...

8.8CVSS7.3AI score0.02094EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2021/01/03 12:00 a.m.10 views

PT-2021-7969 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: xpdf version 4.02 Description: The issue is related to an infinite recursion in the Catalog::findDestInTree function, which can cause a denial of service. This function is part of the xpdf software, used for viewing PDF files. The recursion i...

9.8CVSS6.8AI score0.03518EPSS
SaveExploits5References32
CNVD
CNVD
added 2020/12/28 12:00 a.m.89 views

Xpdf Stack Depletion Vulnerability

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. A stack consumption vulnerability exists in the FoFiType1C::getOp function in Xpdf 4.02. The vulnerability stems from a failure to correctly reference a subroutine in a Type 1C font...

7.5CVSS6.4AI score0.02057EPSS
SaveExploits1References1
NVD
NVD
added 2020/12/26 4:15 a.m.53 views

CVE-2020-35376

Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp function...

7.5CVSS7.4AI score0.02057EPSS
SaveExploits1References3
OSV
OSV
added 2020/12/26 4:15 a.m.8 views

CVE-2020-35376

Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp function...

7.5CVSS7.1AI score0.02057EPSS
SaveExploits1References3
OSV
OSV
added 2020/12/26 4:15 a.m.8 views

UBUNTU-CVE-2020-35376

Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp function...

7.5CVSS7.1AI score0.02057EPSS
SaveExploits1References3
Prion
Prion
added 2020/12/26 4:15 a.m.28 views

Design/Logic Flaw

Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp function...

5CVSS7.3AI score0.02057EPSS
SaveExploits1References3Affected Software2
UbuntuCve
UbuntuCve
added 2020/12/26 4:15 a.m.28 views

CVE-2020-35376

Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp function...

7.5CVSS7.1AI score0.02057EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2020/12/26 3:30 a.m.46 views

CVE-2020-35376

Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp function...

7.3AI score0.02057EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2020/12/26 3:30 a.m.77 views

CVE-2020-35376

Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp function...

7.5CVSS4.3AI score0.02057EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2020/12/26 3:30 a.m.666 views

CVE-2020-35376

Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp function...

7.5CVSS7.4AI score0.02057EPSS
SaveExploits1
Rows per page
Query Builder