CPE Details
Glyph & Cog XpdfReader 4.01
4.01
2019-03-06
15h33 +00:00
15h33 +00:00
2019-03-06
15h33 +00:00
15h33 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:glyphandcog:xpdfreader:4.01:*:*:*:*:*:*:*
Informations
Vendor
glyphandcogProduct
xpdfreaderVersion
4.01Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown integer-related vulnerability in Stream.cc. | 7.8 |
High |
||
| Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc. | 7.8 |
High |
||
| There is a stack consumption issue in md5Round1() located in Decrypt.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to Catalog::countPageTree. | 7.8 |
High |
||
| There is an Invalid memory access in gAtomicIncrement() located at GMutex.h in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. | 7.8 |
High |
||
| There is a NULL pointer dereference vulnerability in PSOutputDev::setupResources() located in PSOutputDev.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. | 7.8 |
High |
