Xpdf vulnerabilities | LiveThreat CVE Feed

Product

Xpdf

by Foolabs · last CVE Mar 31, 2011

CVEs

On KEV

–

Max CVSS

New 30D

Vulnerabilities23 In the news0 Timeline

Severity mix

Critical 0High 0Medium 0Low 0

Severity

All severities23 Critical0 High0 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Xpdf to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2011-1552	–	10%	Mar 31	t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service… Affected: 0.5a; 0.7a; 0.91a; 0.91b; 0.91c; 0.92a; +13 more
CVE-2011-1554	–	5%	Mar 31	Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash)… Affected: 0.5a; 0.7a; 0.91a; 0.91b; 0.91c; 0.92a; +13 more
CVE-2011-1553	–	5%	Mar 31	Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service… Affected: 0.5a; 0.7a; 0.91a; 0.91b; 0.91c; 0.92a; +13 more
CVE-2011-0764	–	13%	Mar 31	t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote… Affected: 0.5a; 0.7a; 0.91a; 0.91b; 0.91c; 0.92a; +13 more
CVE-2010-3704	–	4%	Nov 5	The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly… Affected: 0.5a; 0.7a; 0.91a; 0.91b; 0.91c; 0.92a; +12 more
CVE-2009-3609	–	5%	Oct 21	Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops,… Affected: 3.02pl1; 3.02pl2; 3.02pl3
CVE-2009-3608	–	10%	Oct 21	Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and… Affected: 3.02pl1; 3.02pl2; 3.02pl3
CVE-2009-3606	–	9%	Oct 21	Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary… Affected: 3.02pl1; 3.02pl2; 3.02pl3
CVE-2009-3604	–	9%	Oct 21	The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which… Affected: 3.02pl1; 3.02pl2; 3.02pl3
CVE-2009-3603	–	9%	Oct 21	Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a… Affected: 3.02pl1; 3.02pl2; 3.02pl3
CVE-2009-0165	–	4%	Apr 23	Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to "g*allocn." Affected: 0.5a; 0.7a; 0.91a; 0.91b; 0.91c; 0.92a; +9 more
CVE-2009-1183	–	4%	Apr 23	The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite… Affected: 0.5a; 0.7a; 0.91a; 0.91b; 0.91c; 0.92a; +8 more
CVE-2009-1182	–	7%	Apr 23	Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute… Affected: 0.5a; 0.7a; 0.91a; 0.91b; 0.91c; 0.92a; +8 more
CVE-2009-1181	–	4%	Apr 23	The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a… Affected: 0.5a; 0.7a; 0.91a; 0.91b; 0.91c; 0.92a; +8 more
CVE-2009-1180	–	5%	Apr 23	The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted… Affected: 0.5a; 0.7a; 0.91a; 0.91b; 0.91c; 0.92a; +8 more
CVE-2009-1179	–	6%	Apr 23	Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary… Affected: 0.5a; 0.7a; 0.91a; 0.91b; 0.91c; 0.92a; +8 more
CVE-2009-0800	–	5%	Apr 23	Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to… Affected: 0.5a; 0.7a; 0.91a; 0.91b; 0.91c; 0.92a; +8 more
CVE-2009-0799	–	4%	Apr 23	The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a… Affected: 0.5a; 0.7a; 0.91a; 0.91b; 0.91c; 0.92a; +8 more
CVE-2009-0195	–	5%	Apr 23	Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted… Affected: 0.5a; 0.7a; 0.91a; 0.91b; 0.91c; 0.92a; +9 more
CVE-2009-0166	–	2%	Apr 23	The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that… Affected: 0.5a; 0.7a; 0.91a; 0.91b; 0.91c; 0.92a; +8 more
CVE-2009-0147	–	3%	Apr 23	Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash)… Affected: 0.5a; 0.7a; 0.91a; 0.91b; 0.91c; 0.92a; +8 more
CVE-2009-0146	–	3%	Apr 23	Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash)… Affected: 0.5a; 0.7a; 0.91a; 0.91b; 0.91c; 0.92a; +8 more
CVE-2009-1144	–	0%	Apr 9	Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users to gain privileges via a Trojan horse xpdfrc file in the current working… Affected: 0.5a; 0.7a; 0.91a; 0.91b; 0.91c; 0.92a; +8 more