XP
Product
Xpdfreader
53
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 16Medium 14Low 0
Watch
Add Xpdfreader to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-17064 | 5.5 | Oct 1 | Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor Affected: 4.02 |
| CVE-2019-16088 | 5.5 | Sep 6 | Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc Affected: 3.04 |
| CVE-2019-15860 | 5.5 | Sep 3 | Xpdf 2.00 allows a SIGSEGV in XRef::constructXRef in XRef.cc Affected: 2.00 |
| CVE-2019-14294 | 5.5 | Jul 27 | An issue was discovered in Xpdf 4.01.01 Affected: 4.01.01 |
| CVE-2019-14293 | 5.5 | Jul 27 | An issue was discovered in Xpdf 4.01.01 Affected: 4.01.01 |
| CVE-2019-14292 | 5.5 | Jul 27 | An issue was discovered in Xpdf 4.01.01 Affected: 4.01.01 |
| CVE-2019-14291 | 5.5 | Jul 27 | An issue was discovered in Xpdf 4.01.01 Affected: 4.01.01 |
| CVE-2019-14290 | 5.5 | Jul 27 | An issue was discovered in Xpdf 4.01.01 Affected: 4.01.01 |
| CVE-2019-14289 | 5.5 | Jul 27 | An issue was discovered in Xpdf 4.01.01 Affected: 4.01.01 |
| CVE-2019-13291 | 5.5 | Jul 4 | In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan() located at Stream.cc Affected: 4.01.01 |
| CVE-2019-13288 | 5.5 | Jul 4 | In Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file Affected: 4.01.01 |
| CVE-2019-13287 | 5.5 | Jul 4 | In Xpdf 4.01.01, there is an out-of-bounds read vulnerability in the function SplashXPath::strokeAdjust() located at splash/SplashXPath.cc Affected: 4.01.01 |
| CVE-2019-13286 | 5.5 | Jul 4 | In Xpdf 4.01.01, there is a heap-based buffer over-read in the function JBIG2Stream::readTextRegionSeg() located at JBIG2Stream.cc Affected: 4.01.01 |
| CVE-2019-12958 | 5.5 | Jun 25 | In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc when it is trying to access the second privateDicts array… Affected: 4.01.01 |
Showing 14