İçeriğe atla
Noroxi

Xpdf kayıtları

xpdf üreticisine ait 26 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
17
Düzeltme kaydı olan
%92,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    26 kayıt
    • CVE-2004-0888
      43Planlayın

      Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote atta

      KritikCVSS 10,0İstismar yokEPSS %10

      kde · koffice27 Oca 2005

    • CVE-2003-0434
      42Planlayın

      Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metach

      YüksekCVSS 7,5Kavram kanıtıEPSS %41

      adobe · acrobat24 Tem 2003

    • CVE-2004-0889
      42Planlayın

      Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of serv

      KritikCVSS 10,0İstismar yokEPSS %6

      xpdf · xpdf27 Oca 2005

    • CVE-2005-3625
      41Planlayın

      Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial

      KritikCVSS 10,0İstismar yokEPSS %4

      libextractor · libextractor31 Ara 2005

    • CVE-2004-1125
      39İzleyin

      Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3

      KritikCVSS 9,3İstismar yokEPSS %7

      xpdf · xpdf10 Oca 2005

    • CVE-2007-5393
      39İzleyin

      Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbit

      KritikCVSS 9,3İstismar yokEPSS %6

      xpdf · xpdf7 Kas 2007

    • CVE-2007-5392
      39İzleyin

      Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a cr

      KritikCVSS 9,3İstismar yokEPSS %6

      xpdf · xpdf7 Kas 2007

    • CVE-2009-4035
      38İzleyin

      The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and ve

      KritikCVSS 9,3İstismar yokEPSS %4

      kde · kdegraphics21 Ara 2009

    • CVE-2005-0064
      32İzleyin

      Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary c

      YüksekCVSS 7,5İstismar yokEPSS %7

      xpdf · xpdf2 May 2005

    • CVE-2007-4352
      32İzleyin

      Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffic

      YüksekCVSS 7,6İstismar yokEPSS %7

      xpdf · xpdf7 Kas 2007

    • CVE-2005-3192
      32İzleyin

      Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, a

      YüksekCVSS 7,5İstismar yokEPSS %6

      xpdf · xpdf7 Ara 2005

    • CVE-2005-3627
      32İzleyin

      Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to mo

      YüksekCVSS 7,5İstismar yokEPSS %6

      xpdf · xpdf31 Ara 2005

    • CVE-2006-0301
      31İzleyin

      Heap-based buffer overflow in Splash.cc in xpdf, as used in other products such as (1) poppler, (2) kdegraphics, (3) gpdf, (4) pdfkit.framew

      YüksekCVSS 7,5İstismar yokEPSS %5

      xpdf · xpdf30 Oca 2006

    • CVE-2005-3628
      31İzleyin

      Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppl

      YüksekCVSS 7,5İstismar yokEPSS %4

      xpdf · xpdf31 Ara 2005

    • CVE-2006-0746
      31İzleyin

      Certain patches for kpdf do not include all relevant patches from xpdf that were associated with CVE-2005-3627, which allows context-depende

      YüksekCVSS 7,5İstismar yokEPSS %3

      xpdf · xpdf8 Mar 2006

    • CVE-2005-0206
      31İzleyin

      The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux d

      YüksekCVSS 7,5İstismar yokEPSS %3

      xpdf · xpdf27 Nis 2005

    • CVE-2000-0727
      31İzleyin

      xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbi

      YüksekCVSS 7,6İstismar yokEPSS %3

      xpdf · xpdf20 Eki 2000

    • CVE-2006-1244
      31İzleyin

      Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c)

      YüksekCVSS 7,6İstismar yokEPSS %2

      xpdf · xpdf15 Mar 2006

    • CVE-2007-0104
      29İzleyin

      The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other

      OrtaCVSS 6,8İstismar yokEPSS %6

      xpdf · xpdf8 Oca 2007

    • CVE-2002-1384
      28İzleyin

      Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code

      YüksekCVSS 7,2İstismar yokEPSS %1

      xpdf · xpdf2 Oca 2003

    • CVE-2000-0728
      28İzleyin

      xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack.

      YüksekCVSS 7,2İstismar yokEPSS %0

      xpdf · xpdf20 Eki 2000

    • CVE-2005-3193
      21İzleyin

      Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier,

      OrtaCVSS 5,1İstismar yokEPSS %4

      xpdf · xpdf6 Ara 2005

    • CVE-2005-3191
      21İzleyin

      Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream

      OrtaCVSS 5,1İstismar yokEPSS %4

      xpdf · xpdf6 Ara 2005

    • CVE-2005-3626
      21İzleyin

      Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial

      OrtaCVSS 5,0İstismar yokEPSS %3

      libextractor · libextractor31 Ara 2005

    • CVE-2005-3624
      21İzleyin

      The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others all

      OrtaCVSS 5,0İstismar yokEPSS %2

      libextractor · libextractor31 Ara 2005