Browse CVEs

HIGH 9.3 CVE-2007-5392EPSS 6% Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF… Xpdf Patch available Fix from $1,9502007-11-08 HIGH 9.3 CVE-2007-5393EPSS 6% Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code… Xpdf Patch available Fix from $1,9502007-11-08 HIGH 7.6 CVE-2007-4352EPSS 7% Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, … Xpdf Patch available Fix from $1,9502007-11-08 MEDIUM 6.8 CVE-2007-0104EPSS 6% The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products… Xpdf No fix yet Fix from $1,6002007-01-09 HIGH 7.5 CVE-2006-0746 Certain patches for kpdf do not include all relevant patches from xpdf that were associated with CVE-2005-3627, which allows context-dependent attack… Xpdf Mitigation only Fix from $1,9502006-03-09 HIGH 7.5 CVE-2006-0301 Heap-based buffer overflow in Splash.cc in xpdf, as used in other products such as (1) poppler, (2) kdegraphics, (3) gpdf, (4) pdfkit.framework, and … Xpdf Patch available Fix from $1,9502006-01-30 HIGH 7.5 CVE-2005-3627EPSS 6% Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memo… Xpdf Patch available Fix from $1,9502005-12-31 HIGH 7.5 CVE-2005-3628 Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX… Xpdf Patch available Fix from $1,9502005-12-31 HIGH 7.5 CVE-2005-3192EPSS 6% Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pd… Xpdf Patch available Fix from $1,9502005-12-08 MEDIUM 5.1 CVE-2005-3191 Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing … Xpdf Patch available Fix from $1,6002005-12-07 MEDIUM 5.1 CVE-2005-3193 Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used … Xpdf Patch available Fix from $1,6002005-12-07 HIGH 7.5 CVE-2005-0064EPSS 7% Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a… Xpdf Patch available Fix from $1,9502005-05-02 HIGH 7.6 CVE-2000-0727 xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary com… Xpdf Patch available Fix from $1,9502000-10-20 HIGH 7.2 CVE-2000-0728 xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack. Xpdf Patch available Fix from $1,9502000-10-20