XP
Product
Xpdf
28
CVEs
0
On KEV
2.1
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 0Low 2
Watch
Add Xpdf to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-116671 New | 2.1 | Oct 26 | Infinite loop in Xpdf due to missing validation in JPEG 2000 decoder Affected: through 4.06 |
| CVE-2026-85458 | 2.1 | Sep 3 | Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyph Affected: 4.06 |
| CVE-2009-4035 | – | Dec 21 | The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value… Affected: 3.0.0 |
| CVE-2007-4352 | – | Nov 8 | Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows… Affected: 3.0.1_pl1 |
| CVE-2007-5393 | – | Nov 8 | Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains… Affected: 3.02p11 |
| CVE-2007-5392 | – | Nov 8 | Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a… Affected: 3.0.1_pl1 |
| CVE-2007-0104 | – | Jan 9 | The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to… Affected: 3.0; 3.0.1; 3.0.1_pl1; 3.0.1_pl2; 3.0_pl2 |
| CVE-2006-1244 | – | Mar 15 | Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has… Affected: 0.90; 0.91; 0.92; 0.93; 1.0; 1.0a; +10 more |
| CVE-2006-0746 | – | Mar 9 | Certain patches for kpdf do not include all relevant patches from xpdf that were associated with CVE-2005-3627, which allows context-dependent attackers to exploit vulnerabilities… Affected: All versions, or not specified |
| CVE-2006-0301 | – | Jan 30 | Heap-based buffer overflow in Splash.cc in xpdf, as used in other products such as (1) poppler, (2) kdegraphics, (3) gpdf, (4) pdfkit.framework, and others, allows attackers to… Affected: All versions, or not specified |
| CVE-2005-3625 | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams… Affected: 3.0 |
| CVE-2005-3624 | – | Dec 31 | The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via… Affected: 3.0 |
| CVE-2005-3626 | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted… Affected: 3.0 |
| CVE-2005-3627 | – | Dec 31 | Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute… Affected: All versions, or not specified |
| CVE-2005-3628 | – | Dec 31 | Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and… Affected: All versions, or not specified |
| CVE-2005-3192 | – | Dec 8 | Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord,… Affected: 3.0.1 |
| CVE-2005-3191 | – | Dec 7 | Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01… Affected: 0.90; 0.91; 0.92; 0.93; 1.0; 1.0a; +9 more |
| CVE-2005-3193 | – | Dec 7 | Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in products such as (1)… Affected: 0.90; 0.91; 0.92; 0.93; 1.0; 1.0a; +9 more |
| CVE-2005-2097 | – | Aug 16 | xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a… Affected: 3.0; 3.0_pl2; 3.0_pl3 |
| CVE-2005-0064 | – | May 2 | Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large… Affected: 0.2; 0.3; 0.4; 0.5; 0.5a; 0.6; +26 more |
| CVE-2005-0206 | – | Apr 27 | The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which… Affected: 0.90; 0.91; 0.92; 0.93; 1.0; 1.0a; +5 more |
| CVE-2004-0889 | – | Jan 27 | Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute… Affected: 0.90; 0.91; 0.92; 0.93; 1.0; 1.0a; +5 more |
| CVE-2004-0888 | – | Jan 27 | Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service… Affected: 0.90; 0.91; 0.92; 0.93; 1.0; 1.0a; +5 more |
| CVE-2004-1125 | – | Jan 10 | Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2,… Affected: 3.0 |
| CVE-2003-0434 | – | Jul 24 | Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink Affected: 1.1 |
| CVE-2002-1384 | – | Jan 2 | Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large… Affected: 0.90; 0.91; 1.0; 1.0a; 1.1; 2.0; +1 more |
| CVE-2000-0728 | – | Oct 20 | xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack Affected: 0.90 |
| CVE-2000-0727 | – | Oct 20 | xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains… Affected: 0.90 |
Showing 28