Design/Logic Flaw

In Xpdf 4.01.01, a buffer over-read could be triggered in FoFiType1C::convertToType1 in fofi/FoFiType1C.cc when the index number is larger than the charset array bounds. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It allows an attacker to use a crafted...

CVE-2019-12957

In Xpdf 4.01.01, a buffer over-read could be triggered in FoFiType1C::convertToType1 in fofi/FoFiType1C.cc when the index number is larger than the charset array bounds. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It allows an attacker to use a crafted...

Heap overflow

In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc when it is trying to access the second privateDicts array element, because the privateDicts array has only one element allocated...

UBUNTU-CVE-2019-12958

In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc when it is trying to access the second privateDicts array element, because the privateDicts array has only one element allocated...

CVE-2019-12958

In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc when it is trying to access the second privateDicts array element, because the privateDicts array has only one element allocated...

Xpdf Heap Buffer Overflow Vulnerability

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. A heap buffer overflow vulnerability exists in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc in Xpdf 4.01.01 when attempting to access a second privateDicts array element. The...

Xpdf buffer overflow vulnerability (CNVD-2019-19489)

Xpdf is an open source PDF reader from Foo Labs. The product supports decoding LZW compressed format files and read encrypted PDF files. Xpdf 4.01.01 version of the fofi/FoFiType1C.cc file of FoFiType1C::convertToType1 there is a buffer overflow vulnerability. An attacker can exploit this...

CVE-2019-12958

CVE-2019-12958 affects Xpdf 4.01.01, where FoFiType1C::convertToType0 can over-read the heap when accessing the second element of privateDicts, because the array is only one element allocated. Fedora advisories show remediations by updating xpdf to 4.02 (FEDORA-2019-01da705767, FEDORA-2019-759ba8...

CVE-2019-12958

In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc when it is trying to access the second privateDicts array element, because the privateDicts array has only one element allocated...

CVE-2019-12958

In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc when it is trying to access the second privateDicts array element, because the privateDicts array has only one element allocated...

CVE-2019-12957

In Xpdf 4.01.01, a buffer over-read could be triggered in FoFiType1C::convertToType1 in fofi/FoFiType1C.cc when the index number is larger than the charset array bounds. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It allows an attacker to use a crafted...

CVE-2019-12957

In Xpdf 4.01.01, FoFiType1C::convertToType1 can trigger a buffer over-read when the index exceeds the charset array bounds. A crafted PDF can trigger this via the pdftops tool, potentially causing Denial of Service or information leakage. The provided documents specify the vulnerability class and...

CVE-2019-12957

In Xpdf 4.01.01, a buffer over-read could be triggered in FoFiType1C::convertToType1 in fofi/FoFiType1C.cc when the index number is larger than the charset array bounds. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It allows an attacker to use a crafted...

Xpdf <= 4.01.01 Multiple Vulnerabilities

Xpdf is prone to multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribu...

Xpdf Out-of-Bounds Read Vulnerability

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. An out-of-bounds read vulnerability exists in the FlateStream::getChar function in Stream.cc in Xpdf 4.01.01. An attacker can exploit this vulnerability by sending a specially crafted P...

UBUNTU-CVE-2019-12515

There is an out-of-bounds read vulnerability in the function FlateStream::getChar located at Stream.cc in Xpdf 4.01.01. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure or a denial of service...

CVE-2019-12515

There is an out-of-bounds read vulnerability in the function FlateStream::getChar located at Stream.cc in Xpdf 4.01.01. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure or a denial of service...

CVE-2019-12515

There is an out-of-bounds read vulnerability in the function FlateStream::getChar located at Stream.cc in Xpdf 4.01.01. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure or a denial of service...

Design/Logic Flaw

There is an out-of-bounds read vulnerability in the function FlateStream::getChar located at Stream.cc in Xpdf 4.01.01. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure or a denial of service...

CVE-2019-12515

There is an out-of-bounds read vulnerability in the function FlateStream::getChar located at Stream.cc in Xpdf 4.01.01. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure or a denial of service...