CveMateVulnerability intelligence

Xpdfreader vulnerabilities

82 vulnerabilities

Known vulnerabilities in Xpdfreader products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1

Xpdf82 vulnerabilities

CVE-2018-16368debianxpdf+38y ago03-09-2018 00:00

SplashXPath::strokeAdjust in splash/SplashXPath.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm.CVE-2018-16369debianxpdf+38y ago03-09-2018 00:00

XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (stack consumption) via a crafted pdf file, related to AcroForm::scanField, as demonstrated by pdftohtml. NOTE: this might overlap CVE-2018-7453.CVE-2018-11033debianxpdf+38y ago14-05-2018 00:00

The DCTStream::readHuffSym function in Stream.cc in the DCT decoder in xpdf before 4.00 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JPEG data.CVE-2018-7454debianxpdf+38y ago24-02-2018 06:00

A NULL pointer dereference in XFAForm::scanFields in XFAForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml.CVE-2018-7174debianxpdf+38y ago15-02-2018 21:00

An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref allows an attacker to cause denial of service because loop detection exists only for tables, not streams.CVE-2018-7175debianxpdf+38y ago15-02-2018 21:00

An issue was discovered in xpdf 4.00. A NULL pointer dereference in readCodestream allows an attacker to cause denial of service via a JPX image with zero components.CVE-2018-7452debianxpdf+38y ago24-02-2018 06:00

A NULL pointer dereference in JPXStream::fillReadBuf in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml.CVE-2018-7173debianxpdf+38y ago15-02-2018 21:00

A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding.CVE-2018-7453debianxpdf+38y ago24-02-2018 06:00

Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop checking, as demonstrated by pdftohtml.CVE-2018-7455debianxpdf+38y ago24-02-2018 06:00

An out-of-bounds read in JPXStream::readTilePart in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml.CVE-2018-18455debianxpdf+38y ago18-10-2018 06:00

The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm.CVE-2018-18458debianxpdf+38y ago18-10-2018 06:00

The function DCTStream::decodeImage in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated by pdftoppm.CVE-2018-18651ubuntuipe+17y ago25-10-2018 13:00

An issue was discovered in Xpdf 4.00. catalog->getNumPages() in AcroForm.cc allows attackers to launch a denial of service (hang caused by large loop) via a specific pdf file, as demonstrated by pdftohtml. This is mainly caused by a large number after the /Count field in the file.CVE-2018-18457debianxpdf+38y ago18-10-2018 06:00

The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated by pdftoppm.CVE-2018-18459debianxpdf+38y ago18-10-2018 06:00

The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated by pdftoppm.CVE-2018-18456debianxpdf+38y ago18-10-2018 06:00

The function Object::isName() in Object.h (called from Gfx::opSetFillColorN) in Xpdf 4.00 allows remote attackers to cause a denial of service (stack-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm.CVE-2018-18650ubuntuipe+17y ago25-10-2018 13:00

An issue was discovered in Xpdf 4.00. XRef::readXRefStream in XRef.cc allows attackers to launch a denial of service (Integer Overflow) via a crafted /Size value in a pdf file, as demonstrated by pdftohtml. This is mainly caused by the program attempting a malloc operation for a large amount of memory.CVE-2018-18454debianxpdf+38y ago18-10-2018 06:00

CCITTFaxStream::readRow() in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm.CVE-2018-8100debianxpdf+38y ago14-03-2018 03:00

The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a specific pdf file, as demonstrated by pdftohtml.CVE-2018-8104debianxpdf+38y ago14-03-2018 03:00

The BufStream::lookChar function in Stream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and application crash) via a specific pdf file, as demonstrated by pdftohtml.