XP
Vendor
Xpdf
28
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116671 New | XP Xpdf Xpdf | 2.1 | Oct 26 | Infinite loop in Xpdf due to missing validation in JPEG 2000 decoder |
| CVE-2026-85458 | XP Xpdf Xpdf | 2.1 | Sep 3 | Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyph |
| CVE-2026-4407 | XP Xpdf Xpdf | 2.1 | Mar 18 | Out-of-bounds array write in Xpdf 4.06 due to missing validation |
| CVE-2009-4035 | XP Xpdf Xpdf | – | Dec 21 | The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value… |
| CVE-2007-4352 | XP Xpdf Xpdf | – | Nov 8 | Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows… |
| CVE-2007-5393 | XP Xpdf Xpdf | – | Nov 8 | Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains… |
| CVE-2007-5392 | XP Xpdf Xpdf | – | Nov 8 | Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a… |
| CVE-2007-0104 | XP Xpdf Xpdf | – | Jan 9 | The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to… |
| CVE-2006-1244 | XP Xpdf Xpdf | – | Mar 15 | Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has… |
| CVE-2006-0746 | XP Xpdf Xpdf | – | Mar 9 | Certain patches for kpdf do not include all relevant patches from xpdf that were associated with CVE-2005-3627, which allows context-dependent attackers to exploit vulnerabilities… |
| CVE-2006-0301 | XP Xpdf Xpdf | – | Jan 30 | Heap-based buffer overflow in Splash.cc in xpdf, as used in other products such as (1) poppler, (2) kdegraphics, (3) gpdf, (4) pdfkit.framework, and others, allows attackers to… |
| CVE-2005-3625 | XP Xpdf Xpdf | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams… |
| CVE-2005-3624 | XP Xpdf Xpdf | – | Dec 31 | The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via… |
| CVE-2005-3626 | XP Xpdf Xpdf | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted… |
| CVE-2005-3627 | XP Xpdf Xpdf | – | Dec 31 | Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute… |
| CVE-2005-3628 | XP Xpdf Xpdf | – | Dec 31 | Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and… |
| CVE-2005-3192 | XP Xpdf Xpdf | – | Dec 8 | Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord,… |
| CVE-2005-3191 | XP Xpdf Xpdf | – | Dec 7 | Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01… |
| CVE-2005-3193 | XP Xpdf Xpdf | – | Dec 7 | Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in products such as (1)… |
| CVE-2005-2097 | XP Xpdf Xpdf | – | Aug 16 | xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a… |
| CVE-2005-0064 | XP Xpdf Xpdf | – | May 2 | Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large… |
| CVE-2005-0206 | XP Xpdf Xpdf | – | Apr 27 | The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which… |
| CVE-2004-0889 | XP Xpdf Xpdf | – | Jan 27 | Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute… |
| CVE-2004-0888 | XP Xpdf Xpdf | – | Jan 27 | Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service… |
| CVE-2004-1125 | XP Xpdf Xpdf | – | Jan 10 | Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2,… |
| CVE-2003-0434 | XP Xpdf Xpdf | – | Jul 24 | Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink |
| CVE-2002-1384 | XP Xpdf Xpdf | – | Jan 2 | Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large… |
| CVE-2000-0728 | XP Xpdf Xpdf | – | Oct 20 | xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack |
| CVE-2000-0727 | XP Xpdf Xpdf | – | Oct 20 | xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains… |