Skip to content
Noroxi

poppler records

28 published records for vendor poppler.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
16
With a fix record
100%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    28 records
    • CVE-2005-3625
      41Plan

      Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial

      CriticalCVSS 10.0No exploitEPSS 3%

      libextractor · libextractorDec 31, 2005

    • CVE-2009-0165
      41Plan

      Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unsp

      CriticalCVSS 10.0No exploitEPSS 3%

      poppler · popplerApr 23, 2009

    • CVE-2009-3608
      40Plan

      Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf

      CriticalCVSS 9.3No exploitEPSS 10%

      poppler · popplerOct 21, 2009

    • CVE-2009-3604
      40Plan

      The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does

      CriticalCVSS 9.3No exploitEPSS 8%

      kde · kpdfOct 21, 2009

    • CVE-2009-3606
      40Plan

      Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow

      CriticalCVSS 9.3No exploitEPSS 8%

      poppler · popplerOct 21, 2009

    • CVE-2009-3603
      40Plan

      Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attacker

      CriticalCVSS 9.3No exploitEPSS 8%

      poppler · popplerOct 21, 2009

    • CVE-2009-3607
      39Monitor

      Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause

      CriticalCVSS 9.3No exploitEPSS 5%

      poppler · popplerOct 21, 2009

    • CVE-2008-2950
      35Monitor

      The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Pa

      HighCVSS 7.5Proof of conceptEPSS 15%

      poppler · popplerJul 7, 2008

    • CVE-2009-1182
      32Monitor

      Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other pro

      HighCVSS 7.5No exploitEPSS 7%

      poppler · popplerApr 23, 2009

    • CVE-2009-1179
      29Monitor

      Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows

      MediumCVSS 6.8No exploitEPSS 5%

      poppler · popplerApr 23, 2009

    • CVE-2009-0800
      29Monitor

      Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other

      MediumCVSS 6.8No exploitEPSS 5%

      poppler · popplerApr 23, 2009

    • CVE-2009-1180
      29Monitor

      The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to

      MediumCVSS 6.8No exploitEPSS 5%

      poppler · popplerApr 23, 2009

    • CVE-2009-3938
      29Monitor

      Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc in Poppler (aka libpoppler) 0.10.6, 0.12.0, and possibly ot

      MediumCVSS 6.8No exploitEPSS 5%

      poppler · popplerNov 13, 2009

    • CVE-2008-1693
      28Monitor

      The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other

      MediumCVSS 6.8No exploitEPSS 4%

      poppler · popplerApr 18, 2008

    • CVE-2009-3605
      28Monitor

      Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possibly

      MediumCVSS 6.8No exploitEPSS 4%

      poppler · popplerNov 2, 2009

    • CVE-2010-3704
      28Monitor

      The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to

      MediumCVSS 6.8No exploitEPSS 3%

      poppler · popplerNov 5, 2010

    • CVE-2009-0755
      23Monitor

      The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF

      MediumCVSS 5.0Proof of conceptEPSS 10%

      poppler · popplerMar 3, 2009

    • CVE-2009-0756
      23Monitor

      The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF

      MediumCVSS 5.0Proof of conceptEPSS 10%

      poppler · popplerMar 3, 2009

    • CVE-2009-1188
      22Monitor

      Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and

      MediumCVSS 5.0No exploitEPSS 7%

      poppler · popplerApr 23, 2009

    • CVE-2009-1187
      22Monitor

      Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and pos

      MediumCVSS 5.0No exploitEPSS 7%

      poppler · popplerApr 23, 2009

    • CVE-2005-3626
      21Monitor

      Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial

      MediumCVSS 5.0No exploitEPSS 3%

      libextractor · libextractorDec 31, 2005

    • CVE-2005-3624
      21Monitor

      The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others all

      MediumCVSS 5.0No exploitEPSS 2%

      libextractor · libextractorDec 31, 2005

    • CVE-2009-3609
      18Monitor

      Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kd

      MediumCVSS 4.3No exploitEPSS 4%

      poppler · popplerOct 21, 2009

    • CVE-2009-1181
      18Monitor

      The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to

      MediumCVSS 4.3No exploitEPSS 3%

      poppler · popplerApr 23, 2009

    • CVE-2009-0799
      18Monitor

      The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to

      MediumCVSS 4.3No exploitEPSS 3%

      poppler · popplerApr 23, 2009