Glyph & Cog XpdfReader 4.01

CPE Details

Glyph & Cog XpdfReader 4.01
glyphandcog
xpdfreader
4.01
2019-03-06
15h33 +00:00
2019-03-06
15h33 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:glyphandcog:xpdfreader:4.01:*:*:*:*:*:*:*

Informations

Vendor

glyphandcog

Product

xpdfreader

Version

4.01

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2022-24106 2022-08-30 03h05 +00:00 In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown integer-related vulnerability in Stream.cc.
7.8
Haute
CVE-2022-24107 2022-08-30 03h04 +00:00 Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc.
7.8
Haute
CVE-2019-9587 2019-03-06 07h00 +00:00 There is a stack consumption issue in md5Round1() located in Decrypt.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to Catalog::countPageTree.
7.8
Haute
CVE-2019-9588 2019-03-06 07h00 +00:00 There is an Invalid memory access in gAtomicIncrement() located at GMutex.h in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
7.8
Haute
CVE-2019-9589 2019-03-06 07h00 +00:00 There is a NULL pointer dereference vulnerability in PSOutputDev::setupResources() located in PSOutputDev.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
7.8
Haute