Browse CVEs

MEDIUM 6.5 CVE-2020-18839 Buffer Overflow vulnerability in HtmlOutputDev::page in poppler 0.75.0 allows attackers to cause a denial of service. Poppler No fix yet Fix from $1,6002023-08-22 MEDIUM 6.5 CVE-2020-27748 A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreet… Xdg Utils No fix yet Fix from $1,6002021-06-01 HIGH 7.8 CVE-2020-35512 A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <= 1.12.18, and dbus-1.10.x and older branches <= 1… Dbus Mitigation only Fix from $1,9502021-02-15 HIGH 7.8 CVE-2020-35702 DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document. NOTE: later reports indicate that… Poppler No fix yet Fix from $1,9502020-12-25 MEDIUM 6.5 CVE-2019-10873 An issue was discovered in Poppler 0.74.0. There is a NULL pointer dereference in the function SplashClip::clipAALine at splash/SplashClip.cc. Poppler No fix yet Fix from $1,6002019-04-05 HIGH 8.8 CVE-2019-10872 An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc. Poppler No fix yet Fix from $1,9502019-04-05 MEDIUM 6.5 CVE-2019-10871 An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc. Poppler No fix yet Fix from $1,6002019-04-05 HIGH 8.8 CVE-2019-9543 An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap() located in JBIG2Stream.cc, can be triggered… Poppler No fix yet Fix from $1,9502019-03-01 HIGH 8.8 CVE-2019-9545 An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by… Poppler No fix yet Fix from $1,9502019-03-01 HIGH 7.5 CVE-2017-14929 In Poppler 0.59.0, memory corruption occurs in a call to Object::dictLookup() in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::exe… Poppler Mitigation only Fix from $1,9502017-09-30 MEDIUM 5.5 CVE-2017-14927 In Poppler 0.59.0, a NULL Pointer Dereference exists in the SplashOutputDev::type3D0() function in SplashOutputDev.cc via a crafted PDF document. Poppler Mitigation only Fix from $1,6002017-09-30 HIGH 7.8 CVE-2017-14617 In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malici… Poppler Mitigation only Fix from $1,9502017-09-20 HIGH 7.8 CVE-2017-14518 In Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired() function in Splash.cc via a crafted PDF document. Poppler No fix yet Fix from $1,9502017-09-17 HIGH 7.8 CVE-2017-14520 In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd() in Splash.cc, which may lead to a potential attack when handling mal… Poppler No fix yet Fix from $1,9502017-09-17 HIGH 7.5 CVE-2017-14519 In Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::ex… Poppler No fix yet Fix from $1,9502017-09-17 MEDIUM 5.5 CVE-2017-14517 In Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry() function in XRef.cc via a crafted PDF document. Poppler No fix yet Fix from $1,6002017-09-17 HIGH 8.8 CVE-2017-2814 An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted pdf can cause an ima… Poppler Mitigation only Fix from $1,9502017-07-12 HIGH 8.8 CVE-2017-2818 An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted PDF can cause an ove… Poppler Mitigation only Fix from $1,9502017-07-12 HIGH 8.8 CVE-2017-2820 An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Poppler 0.53.0. A specially craf… Poppler No fix yet Fix from $1,9502017-07-12 MEDIUM 6.5 CVE-2017-9083 poppler 0.54.0, as used in Evince and other products, has a NULL pointer dereference in the JPXStream::readUByte function in JPXStream.cc. For exampl… Poppler No fix yet Fix from $1,6002017-05-19 MEDIUM 6.8 CVE-2009-0068 Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type th… Xdg Utils Mitigation only Fix from $1,6002009-01-07 MEDIUM 6.9 CVE-2008-4984 scratchbox2 1.99.0.24 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/dpkg.#####.tmp, (b) /tmp/missing_deps.#####, a… Scratchbox2 Mitigation only Fix from $1,6002008-11-06