Glyphandcog Xpdfreader vulnerabilities
52 known vulnerabilities affecting glyphandcog/xpdfreader.
Total CVEs
52
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL5HIGH16MEDIUM31
Vulnerabilities
Page 3 of 3
CVE-2009-1182HIGHCVSS 7.5≤ 3.02v0.2+18 more2009-04-23
CVE-2009-1182 [HIGH] CWE-119 CVE-2009-1182: Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earli
Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.
nvd
CVE-2009-1183MEDIUMCVSS 4.3≤ 3.02v0.2+18 more2009-04-23
CVE-2009-1183 [MEDIUM] CWE-399 CVE-2009-1183: The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, an
The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted PDF file.
nvd
CVE-2009-0195MEDIUMCVSS 6.8≤ 3.02v0.2+17 more2009-04-23
CVE-2009-0195 [MEDIUM] CWE-119 CVE-2009-0195: Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, all
Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.
nvd
CVE-2009-1180MEDIUMCVSS 6.8≤ 3.02v0.2+18 more2009-04-23
CVE-2009-1180 [MEDIUM] CWE-399 CVE-2009-1180: The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and ot
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data.
nvd
CVE-2009-0166MEDIUMCVSS 4.3≤ 3.02v0.2+18 more2009-04-23
CVE-2009-0166 [MEDIUM] CWE-399 CVE-2009-0166: The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows rem
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory.
nvd
CVE-2009-0146MEDIUMCVSS 4.3≤ 3.02v0.2+18 more2009-04-23
CVE-2009-0146 [MEDIUM] CWE-119 CVE-2009-0146: Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier,
Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2SymbolDict::setBitmap and (2) JBIG2Stream::readSymbolDictSeg.
nvd
CVE-2009-1179MEDIUMCVSS 6.8≤ 3.02v0.2+18 more2009-04-23
CVE-2009-1179 [MEDIUM] CWE-189 CVE-2009-1179: Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler b
Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.
nvd
CVE-2009-1181MEDIUMCVSS 4.3≤ 3.02v0.2+18 more2009-04-23
CVE-2009-1181 [MEDIUM] CWE-399 CVE-2009-1181: The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and ot
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference.
nvd
CVE-2009-0800MEDIUMCVSS 6.8≤ 3.02v0.2+18 more2009-04-23
CVE-2009-0800 [MEDIUM] CWE-20 CVE-2009-0800: Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and e
Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.
nvd
CVE-2009-0147MEDIUMCVSS 4.3≤ 3.02v0.2+18 more2009-04-23
CVE-2009-0147 [MEDIUM] CWE-189 CVE-2009-0147: Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier,
Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.
nvd
CVE-2009-0799MEDIUMCVSS 4.3≤ 3.02v0.2+18 more2009-04-23
CVE-2009-0799 [MEDIUM] CWE-119 CVE-2009-0799: The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and ot
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read.
nvd
CVE-2009-1144MEDIUMCVSS 6.9≤ 3.02v0.2+16 more2009-04-09
CVE-2009-1144 [MEDIUM] CWE-94 CVE-2009-1144: Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users
Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users to gain privileges via a Trojan horse xpdfrc file in the current working directory, related to an unset SYSTEM_XPDFRC macro in a Gentoo build process that uses the poppler library.
nvd
← Previous3 / 3