3121 matches found
CVE-2024-3900
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by long Unicode sequence in ActualText...
CVE-2024-3900 Out-of-bounds stack array write in Xpdf 4.05 due to missing zero check
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by long Unicode sequence in ActualText...
CVE-2024-3900
Removed by vendor...
Xpdf 缓冲区错误漏洞
Xpdf is a free PDF viewer and toolkit from Xpdf, including a text extractor, image converter, HTML converter, and more. A security vulnerability exists in Xpdf versions 4.05 and earlier, which stems from a long Unicode sequence in ActualText that could result in out-of-bounds array writes...
PT-2024-28315
Name of the Vulnerable Software and Affected Versions Xpdf versions 4.05 and earlier Description The issue is an out-of-bounds array write triggered by a long Unicode sequence in ActualText. This can potentially lead to exploitation. Recommendations For Xpdf versions 4.05 and earlier, consider...
Denial Of Service (DoS)
Xpdf is vulnerable to Denial of Service DoS. The vulnerability is due to the TextLine class mishandling characters with large y coordinates, potentially leading to a Denial of Service DoS or other unspecified impacts...
Excessive Memory Allocation (Throttling)
xpdf is vulnerable to Excessive Memory AllocationThrottling. The vulnerability is due to insufficient input validation, which allows crafted input to trigger excessive memory allocation. For example, sending a crafted PDF document to the pdftoppm binary can exploit this vulnerability, particularl...
NULL Pointer Dereference
XPDF is vulnerable to a Null Pointer Dereference. The vulnerability is due to unhandled null pointer dereference, occurring at line 2393 in the FoFiType1C.cc file...
Segmentation Violation
XPDF is vulnerable to a segmentation violation. The vulnerability is due to an issue in the component /xpdf/AcroForm.cc at line 538...
Stack Overflow
Xpdf is vulnerable to a stack overflow. The vulnerability is due to a PDF object loop in the page label tree, leading to infinite recursion...
Stack Overflow
Xpdf is vulnerable to a stack overflow. The vulnerability is due to a PDF object loop in the page label tree, leading to infinite recursion...
Divide-by-Zero
Xpdf is vulnerable to a Divide-by-Zero. The vulnerability is due to a bad color space object in the input PDF file...
Stack Overflow
Xpdf is vulnerable to a stack overflow. The vulnerability is due to a stack overflow in the function Dict::find in xpdf/Dict.cc...
Stack Overflow
Xpdf is vulnerable to a stack overflow. The vulnerability is due to a stack overflow in the function gmalloc in goo/gmem.cc...
Divide By Zero
Xpdf is vulnerable to a divide-by-zero error in its text extraction code. The vulnerability is due to an excessively large PDF page size, which triggers a divide-by-zero error...
Buffer Overflow
XPDF is vulnerable to a Buffer Overflow vulnerability. The vulnerability is due to an attacker being able to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. However, the vendor states that it's an expected abort on out-of-memory error...
Stack Overflow
XPDF is vulnerable to a Stack Overflow in the Catalog::readPageLabelTree2Object function. The vulnerability is due to attackers causing a Denial of Service DoS via a crafted PDF file...
Stack Overflow
XPDF is vulnerable to a Stack Overflow via the function FileStream::copy at xpdf/Stream.cc:795...