3121 matches found
CVE-2022-41844
An issue was discovered in Xpdf 4.04. There is a crash in XRef::fetchint, int, Object, int in xpdf/XRef.cc, a different vulnerability than CVE-2018-16369 and CVE-2019-16088...
CVE-2022-41844
An issue was discovered in Xpdf 4.04. There is a crash in XRef::fetchint, int, Object, int in xpdf/XRef.cc, a different vulnerability than CVE-2018-16369 and CVE-2019-16088...
CVE-2022-41844
An issue was discovered in Xpdf 4.04. There is a crash in XRef::fetchint, int, Object, int in xpdf/XRef.cc, a different vulnerability than CVE-2018-16369 and CVE-2019-16088...
CVE-2022-41844
An issue was discovered in Xpdf 4.04. There is a crash in XRef::fetchint, int, Object, int in xpdf/XRef.cc, a different vulnerability than CVE-2018-16369 and CVE-2019-16088...
CVE-2022-41844
CVE-2022-41844 affects Xpdf 4.04, causing a crash in XRef::fetch(int, int, Object*, int) (xpdf/XRef.cc). It is distinguished from CVE-2018-16369 and CVE-2019-16088. Several advisories note fixes/upgrades; for mitigation, upgrading to a newer Xpdf version is recommended (e.g., >=app-text/xpdf-4...
CVE-2022-41842
An issue was discovered in Xpdf 4.04. There is a crash in gfseekIOFILE, long, int in goo/gfile.cc...
CVE-2022-41844
An issue was discovered in Xpdf 4.04. There is a crash in XRef::fetchint, int, Object, int in xpdf/XRef.cc, a different vulnerability than CVE-2018-16369 and CVE-2019-16088...
CVE-2022-41843
An issue was discovered in Xpdf 4.04. There is a crash in convertToType0 in fofi/FoFiType1C.cc, a different vulnerability than CVE-2022-38928...
XPDF 缓冲区错误漏洞
XPDF is an open source PDF reader. The product supports decoding files in LZW compressed format and reading encrypted PDF files. A resource management error vulnerability exists in XPDF version 4.04, which stems from a crash in the gfseek IOFILE, long, int function in goo/gfile.cc. No details of...
PT-2022-26094 · Xpdf +1 · Xpdf +1
Name of the Vulnerable Software and Affected Versions: Xpdf version 4.04 Description: A problem has been detected in the convertToType0 function in the fofi/FoFiType1C.cc file, causing a crash. This issue is distinct from other known vulnerabilities. Recommendations: For Xpdf version 4.04, consid...
PT-2022-7265 · Xpdf +1 · Xpdf +1
Name of the Vulnerable Software and Affected Versions: Xpdf affected versions not specified Description: The issue is related to a buffer overflow in the XRef::fetch function of the Xpdf software. This could allow an attacker to cause the application to crash. Recommendations: At the moment, ther...
PT-2022-26093 · Xpdf +1 · Xpdf +1
Name of the Vulnerable Software and Affected Versions: Xpdf version 4.04 Description: An issue was discovered that causes a crash in the gfseek IO FILE, long, int function in the goo/gfile.cc file. Recommendations: For Xpdf version 4.04, as a temporary workaround, consider disabling the gfseek...
CVE-2022-38222
There is a use-after-free issue in JBIG2Stream::close located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to for example the pdfimages binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact...
CVE-2022-38222
There is a use-after-free issue in JBIG2Stream::close located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to for example the pdfimages binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact...
CVE-2022-38222
There is a use-after-free issue in JBIG2Stream::close located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to for example the pdfimages binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact...
UBUNTU-CVE-2022-38222
There is a use-after-free issue in JBIG2Stream::close located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to for example the pdfimages binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact...
CVE-2022-38222
There is a use-after-free issue in JBIG2Stream::close located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to for example the pdfimages binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact...
Design/Logic Flaw
There is a use-after-free issue in JBIG2Stream::close located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to for example the pdfimages binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact...
GLSA-202209-21 : Poppler: Arbitrary Code Execution
The remote host is affected by the vulnerability described in GLSA-202209-21 Poppler: Arbitrary Code Execution - An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2...