GL
Vendor
Glyphandcog
55
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-40226 | XP Xpdfreader Glyphandcog | 7.5 | Nov 10 | xpdfreader 4.03 is vulnerable to Buffer Overflow |
| CVE-2022-24107 | XP Xpdfreader Glyphandcog | 7.8 | Aug 30 | Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc |
| CVE-2022-24106 | XP Xpdfreader Glyphandcog | 7.8 | Aug 30 | In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown… |
| CVE-2019-17064 | XP Xpdfreader Glyphandcog | 5.5 | Oct 1 | Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor |
| CVE-2019-16927 | XP Xpdf Glyphandcog | 5.5 | Sep 27 | Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877 |
| CVE-2019-16115 | XP Xpdfreader Glyphandcog | 7.8 | Sep 8 | In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor |
| CVE-2019-16088 | XP Xpdfreader Glyphandcog | 5.5 | Sep 6 | Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc |
| CVE-2019-15860 | XP Xpdfreader Glyphandcog | 5.5 | Sep 3 | Xpdf 2.00 allows a SIGSEGV in XRef::constructXRef in XRef.cc |
| CVE-2019-14294 | XP Xpdfreader Glyphandcog | 5.5 | Jul 27 | An issue was discovered in Xpdf 4.01.01 |
| CVE-2019-14293 | XP Xpdfreader Glyphandcog | 5.5 | Jul 27 | An issue was discovered in Xpdf 4.01.01 |
| CVE-2019-14292 | XP Xpdfreader Glyphandcog | 5.5 | Jul 27 | An issue was discovered in Xpdf 4.01.01 |
| CVE-2019-14291 | XP Xpdfreader Glyphandcog | 5.5 | Jul 27 | An issue was discovered in Xpdf 4.01.01 |
| CVE-2019-14290 | XP Xpdfreader Glyphandcog | 5.5 | Jul 27 | An issue was discovered in Xpdf 4.01.01 |
| CVE-2019-14289 | XP Xpdfreader Glyphandcog | 5.5 | Jul 27 | An issue was discovered in Xpdf 4.01.01 |
| CVE-2019-14288 | XP Xpdfreader Glyphandcog | 7.8 | Jul 27 | An issue was discovered in Xpdf 4.01.01 |
| CVE-2019-13291 | XP Xpdfreader Glyphandcog | 5.5 | Jul 4 | In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan() located at Stream.cc |
| CVE-2019-13289 | XP Xpdfreader Glyphandcog | 7.8 | Jul 4 | In Xpdf 4.01.01, there is a use-after-free vulnerability in the function JBIG2Stream::close() located at JBIG2Stream.cc |
| CVE-2019-13288 | XP Xpdfreader Glyphandcog | 5.5 | Jul 4 | In Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file |
| CVE-2019-13287 | XP Xpdfreader Glyphandcog | 5.5 | Jul 4 | In Xpdf 4.01.01, there is an out-of-bounds read vulnerability in the function SplashXPath::strokeAdjust() located at splash/SplashXPath.cc |
| CVE-2019-13286 | XP Xpdfreader Glyphandcog | 5.5 | Jul 4 | In Xpdf 4.01.01, there is a heap-based buffer over-read in the function JBIG2Stream::readTextRegionSeg() located at JBIG2Stream.cc |
| CVE-2019-13283 | XP Xpdfreader Glyphandcog | 7.8 | Jul 4 | In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in strncpy from FoFiType1::parse in fofi/FoFiType1.cc because it does not ensure the source string has a valid… |
| CVE-2019-13282 | XP Xpdfreader Glyphandcog | 7.8 | Jul 4 | In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in SampledFunction::transform in Function.cc when using a large index for samples |
| CVE-2019-13281 | XP Xpdfreader Glyphandcog | 7.8 | Jul 4 | In Xpdf 4.01.01, a heap-based buffer overflow could be triggered in DCTStream::decodeImage() in Stream.cc when writing to frameBuf memory |
| CVE-2019-12958 | XP Xpdfreader Glyphandcog | 5.5 | Jun 25 | In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc when it is trying to access the second privateDicts array… |
| CVE-2019-12957 | XP Xpdfreader Glyphandcog | 7.8 | Jun 25 | In Xpdf 4.01.01, a buffer over-read could be triggered in FoFiType1C::convertToType1 in fofi/FoFiType1C.cc when the index number is larger than the charset array bounds |
| CVE-2019-12515 | XP Xpdfreader Glyphandcog | 7.1 | Jun 2 | There is an out-of-bounds read vulnerability in the function FlateStream::getChar() located at Stream.cc in Xpdf 4.01.01 |
| CVE-2019-12493 | XP Xpdfreader Glyphandcog | 7.1 | May 31 | A stack-based buffer over-read exists in PostScriptFunction::transform in Function.cc in Xpdf 4.01.01 because GfxSeparationColorSpace and GfxDeviceNColorSpace mishandle tint… |
| CVE-2019-12360 | XP Xpdfreader Glyphandcog | 7.1 | May 27 | A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf 4.01.01 |
| CVE-2019-9587 | XP Xpdfreader Glyphandcog | 7.8 | Mar 6 | There is a stack consumption issue in md5Round1() located in Decrypt.cc in Xpdf 4.01 |
| CVE-2019-9589 | XP Xpdfreader Glyphandcog | 7.8 | Mar 6 | There is a NULL pointer dereference vulnerability in PSOutputDev::setupResources() located in PSOutputDev.cc in Xpdf 4.01 |
| CVE-2019-9588 | XP Xpdfreader Glyphandcog | 7.8 | Mar 6 | There is an Invalid memory access in gAtomicIncrement() located at GMutex.h in Xpdf 4.01 |
| CVE-2011-2902 | XP Xpdf Glyphandcog | 5.3 | Jan 30 | zxpdf in xpdf before 3.02-19 as packaged in Debian unstable and 3.02-12+squeeze1 as packaged in Debian squeeze deletes temporary files insecurely, which allows remote attackers to… |
| CVE-2011-1552 | XP Xpdfreader Glyphandcog | – | Mar 31 | t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service… |
| CVE-2011-1554 | XP Xpdfreader Glyphandcog | – | Mar 31 | Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash)… |
| CVE-2011-1553 | XP Xpdfreader Glyphandcog | – | Mar 31 | Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service… |
| CVE-2011-0764 | XP Xpdfreader Glyphandcog | – | Mar 31 | t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote… |
| CVE-2010-3704 | XP Xpdfreader Glyphandcog | – | Nov 5 | The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly… |
| CVE-2009-3609 | XP Xpdfreader Glyphandcog | – | Oct 21 | Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops,… |
| CVE-2009-3608 | XP Xpdfreader Glyphandcog | – | Oct 21 | Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and… |
| CVE-2009-3606 | XP Xpdfreader Glyphandcog | – | Oct 21 | Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary… |
| CVE-2009-3604 | XP Xpdfreader Glyphandcog | – | Oct 21 | The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which… |
| CVE-2009-3603 | XP Xpdfreader Glyphandcog | – | Oct 21 | Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a… |
| CVE-2009-0165 | XP Xpdfreader Glyphandcog | – | Apr 23 | Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to "g*allocn." |
| CVE-2009-1183 | XP Xpdfreader Glyphandcog | – | Apr 23 | The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite… |
| CVE-2009-1182 | XP Xpdfreader Glyphandcog | – | Apr 23 | Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute… |
| CVE-2009-1181 | XP Xpdfreader Glyphandcog | – | Apr 23 | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a… |
| CVE-2009-1180 | XP Xpdfreader Glyphandcog | – | Apr 23 | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted… |
| CVE-2009-1179 | XP Xpdfreader Glyphandcog | – | Apr 23 | Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary… |
| CVE-2009-0800 | XP Xpdfreader Glyphandcog | – | Apr 23 | Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to… |
| CVE-2009-0799 | XP Xpdfreader Glyphandcog | – | Apr 23 | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a… |
| CVE-2009-0195 | XP Xpdfreader Glyphandcog | – | Apr 23 | Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted… |
| CVE-2009-0166 | XP Xpdfreader Glyphandcog | – | Apr 23 | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that… |
| CVE-2009-0147 | XP Xpdfreader Glyphandcog | – | Apr 23 | Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash)… |
| CVE-2009-0146 | XP Xpdfreader Glyphandcog | – | Apr 23 | Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash)… |
| CVE-2009-1144 | XP Xpdfreader Glyphandcog | – | Apr 9 | Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users to gain privileges via a Trojan horse xpdfrc file in the current working… |