Browse CVEs

MEDIUM 5.5 CVE-2018-18651 An issue was discovered in Xpdf 4.00. catalog->getNumPages() in AcroForm.cc allows attackers to launch a denial of service (hang caused by large loop… Xpdf No fix yet Fix from $1,6002018-10-25 MEDIUM 5.5 CVE-2018-18454 CCITTFaxStream::readRow() in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted … Xpdf Mitigation only Fix from $1,6002018-10-18 MEDIUM 5.5 CVE-2018-18455 The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a craft… Xpdf Mitigation only Fix from $1,6002018-10-18 MEDIUM 5.5 CVE-2018-18456 The function Object::isName() in Object.h (called from Gfx::opSetFillColorN) in Xpdf 4.00 allows remote attackers to cause a denial of service (stack… Xpdf Mitigation only Fix from $1,6002018-10-18 MEDIUM 5.5 CVE-2018-18457 The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a craf… Xpdf Mitigation only Fix from $1,6002018-10-18 MEDIUM 5.5 CVE-2018-18458 The function DCTStream::decodeImage in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a c… Xpdf Mitigation only Fix from $1,6002018-10-18 MEDIUM 5.5 CVE-2018-18459 The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a craf… Xpdf Mitigation only Fix from $1,6002018-10-18 MEDIUM 5.5 CVE-2018-16368 SplashXPath::strokeAdjust in splash/SplashXPath.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) vi… Xpdf No fix yet Fix from $1,6002018-09-03 MEDIUM 5.5 CVE-2018-16369 XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (stack consumption) via a crafted pdf file, related to AcroF… Xpdf No fix yet Fix from $1,6002018-09-03 HIGH 7.8 CVE-2018-11033 The DCTStream::readHuffSym function in Stream.cc in the DCT decoder in xpdf before 4.00 allows remote attackers to cause a denial of service (applica… Xpdf Mitigation only Fix from $1,9502018-05-14 HIGH 7.8 CVE-2018-8100 The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer overflow and applic… Xpdf Mitigation only Fix from $1,9502018-03-14 MEDIUM 5.5 CVE-2018-8101 The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read … Xpdf Mitigation only Fix from $1,6002018-03-14 MEDIUM 5.5 CVE-2018-8102 The JBIG2MMRDecoder::getBlackCode function in JBIG2Stream.cc in xpdf 4.00 allows attackers to launch denial of service (buffer over-read and applicat… Xpdf Mitigation only Fix from $1,6002018-03-14 MEDIUM 5.5 CVE-2018-8103 The JBIG2Stream::readGenericBitmap function in JBIG2Stream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read … Xpdf Mitigation only Fix from $1,6002018-03-14 MEDIUM 5.5 CVE-2018-8104 The BufStream::lookChar function in Stream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and application … Xpdf Mitigation only Fix from $1,6002018-03-14 MEDIUM 5.5 CVE-2018-8105 The JPXStream::fillReadBuf function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and applic… Xpdf Mitigation only Fix from $1,6002018-03-14 MEDIUM 5.5 CVE-2018-8106 The JPXStream::readTilePartData function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and a… Xpdf Mitigation only Fix from $1,6002018-03-14 MEDIUM 5.5 CVE-2018-8107 The JPXStream::close function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and application … Xpdf Mitigation only Fix from $1,6002018-03-14 MEDIUM 5.5 CVE-2018-7452 A NULL pointer dereference in JPXStream::fillReadBuf in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf fil… Xpdf No fix yet Fix from $1,6002018-02-24 MEDIUM 5.5 CVE-2018-7453 Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lac… Xpdf Mitigation only Fix from $1,6002018-02-24 MEDIUM 5.5 CVE-2018-7454 A NULL pointer dereference in XFAForm::scanFields in XFAForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as… Xpdf Mitigation only Fix from $1,6002018-02-24 MEDIUM 5.5 CVE-2018-7455 An out-of-bounds read in JPXStream::readTilePart in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, a… Xpdf Mitigation only Fix from $1,6002018-02-24 MEDIUM 5.5 CVE-2018-7173 A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate de… Xpdf Mitigation only Fix from $1,6002018-02-15 MEDIUM 5.5 CVE-2018-7174 An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref allows an attacker to cause denial of service because loop detection exists only… Xpdf Mitigation only Fix from $1,6002018-02-15 MEDIUM 5.5 CVE-2018-7175 An issue was discovered in xpdf 4.00. A NULL pointer dereference in readCodestream allows an attacker to cause denial of service via a JPX image with… Xpdf Mitigation only Fix from $1,6002018-02-15