XP
Product
Xpdf
On CISA KEVExploited in the wild
82
CVEs
1
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 16Medium 62Low 2
Watch
Add Xpdf to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-8105 | 5.5 | Mar 14 | The JPXStream::fillReadBuf function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and application crash) via a specific… Affected: 4.00 |
| CVE-2018-8104 | 5.5 | Mar 14 | The BufStream::lookChar function in Stream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and application crash) via a specific pdf… Affected: 4.00 |
| CVE-2018-8103 | 5.5 | Mar 14 | The JBIG2Stream::readGenericBitmap function in JBIG2Stream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and application crash) via a… Affected: 4.00 |
| CVE-2018-8102 | 5.5 | Mar 14 | The JBIG2MMRDecoder::getBlackCode function in JBIG2Stream.cc in xpdf 4.00 allows attackers to launch denial of service (buffer over-read and application crash) via a specific pdf… Affected: 4.00 |
| CVE-2018-8101 | 5.5 | Mar 14 | The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and application crash) via a… Affected: 4.00 |
| CVE-2018-7455 | 5.5 | Feb 24 | An out-of-bounds read in JPXStream::readTilePart in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml Affected: 4.00 |
| CVE-2018-7454 | 5.5 | Feb 24 | A NULL pointer dereference in XFAForm::scanFields in XFAForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml Affected: 4.00 |
| CVE-2018-7453 | 5.5 | Feb 24 | Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop checking, as… Affected: 4.00 |
| CVE-2018-7452 | 5.5 | Feb 24 | A NULL pointer dereference in JPXStream::fillReadBuf in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by… Affected: 4.00 |
| CVE-2018-7175 | 5.5 | Feb 15 | An issue was discovered in xpdf 4.00 Affected: 4.00 |
| CVE-2018-7174 | 5.5 | Feb 15 | An issue was discovered in xpdf 4.00 Affected: 4.00 |
| CVE-2018-7173 | 5.5 | Feb 15 | A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding Affected: 4.00 |