Записи poppler
28 опубликованных записей вендора poppler.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 16
- С записью об исправлении
- 100 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Pre-auth RCE: уязвимости, позволяющие выполнить код по сети без учётной записи. Медиана «публикация → KEV»: типичный срок между публикацией записи и её включением в список CISA.
Записи по годам
Столбик: всего · тёмная часть: CISA KEV.
Повторяющиеся классы
- CWE-189 Numeric Errors11
- CWE-399 Resource Management Errors7
- CWE-20 Improper Input Validation4
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer3
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
28 записей| Срочность | CVE | Уязвимость | Критичность | EPSS · Опубликовано |
|---|---|---|---|---|
41В плане | CVE-2005-3625Эксплойта нет | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial libextractor · libextractor · CWE-399 | Критическая10,0 | 3,8 %31 дек. 2005 г. |
41В плане | CVE-2009-0165Эксплойта нет | Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unsppoppler · poppler · CWE-189 | Критическая10,0 | 3,5 %23 апр. 2009 г. |
40В плане | CVE-2009-3608Эксплойта нет | Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdfpoppler · poppler · CWE-189 | Критическая9,3 | 10,2 %21 окт. 2009 г. |
40В плане | CVE-2009-3604Эксплойта нет | The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does kde · kpdf · CWE-399 | Критическая9,3 | 8,7 %21 окт. 2009 г. |
40В плане | CVE-2009-3606Эксплойта нет | Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allowpoppler · poppler · CWE-189 | Критическая9,3 | 8,6 %21 окт. 2009 г. |
40В плане | CVE-2009-3603Эксплойта нет | Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackerpoppler · poppler · CWE-189 | Критическая9,3 | 8,5 %21 окт. 2009 г. |
39Наблюдать | CVE-2009-3607Эксплойта нет | Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause poppler · poppler · CWE-189 | Критическая9,3 | 5,9 %21 окт. 2009 г. |
35Наблюдать | CVE-2008-2950Есть PoC | The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Papoppler · poppler · CWE-94 | Высокая7,5 | 15,0 %7 июл. 2008 г. |
32Наблюдать | CVE-2009-1182Эксплойта нет | Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other propoppler · poppler · CWE-119 | Высокая7,5 | 7,3 %23 апр. 2009 г. |
29Наблюдать | CVE-2009-1179Эксплойта нет | Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows poppler · poppler · CWE-189 | Средняя6,8 | 5,5 %23 апр. 2009 г. |
29Наблюдать | CVE-2009-0800Эксплойта нет | Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and otherpoppler · poppler · CWE-20 | Средняя6,8 | 5,4 %23 апр. 2009 г. |
29Наблюдать | CVE-2009-1180Эксплойта нет | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to poppler · poppler · CWE-399 | Средняя6,8 | 5,4 %23 апр. 2009 г. |
29Наблюдать | CVE-2009-3938Эксплойта нет | Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc in Poppler (aka libpoppler) 0.10.6, 0.12.0, and possibly otpoppler · poppler · CWE-119 | Средняя6,8 | 5,3 %13 нояб. 2009 г. |
28Наблюдать | CVE-2008-1693Эксплойта нет | The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other poppler · poppler · CWE-20 | Средняя6,8 | 4,9 %18 апр. 2008 г. |
28Наблюдать | CVE-2009-3605Эксплойта нет | Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possiblypoppler · poppler · CWE-189 | Средняя6,8 | 4,4 %2 нояб. 2009 г. |
28Наблюдать | CVE-2010-3704Эксплойта нет | The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up topoppler · poppler · CWE-20 | Средняя6,8 | 3,5 %5 нояб. 2010 г. |
23Наблюдать | CVE-2009-0755Есть PoC | The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF poppler · poppler | Средняя5,0 | 10,8 %3 мар. 2009 г. |
23Наблюдать | CVE-2009-0756Есть PoC | The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF poppler · poppler | Средняя5,0 | 10,0 %3 мар. 2009 г. |
22Наблюдать | CVE-2009-1188Эксплойта нет | Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and poppler · poppler · CWE-189 | Средняя5,0 | 7,2 %23 апр. 2009 г. |
22Наблюдать | CVE-2009-1187Эксплойта нет | Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and pospoppler · poppler · CWE-189 | Средняя5,0 | 7,1 %23 апр. 2009 г. |
21Наблюдать | CVE-2005-3626Эксплойта нет | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial libextractor · libextractor · CWE-399 | Средняя5,0 | 3,3 %31 дек. 2005 г. |
21Наблюдать | CVE-2005-3624Эксплойта нет | The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others alllibextractor · libextractor · CWE-189 | Средняя5,0 | 2,3 %31 дек. 2005 г. |
18Наблюдать | CVE-2009-3609Эксплойта нет | Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdpoppler · poppler · CWE-189 | Средняя4,3 | 4,6 %21 окт. 2009 г. |
18Наблюдать | CVE-2009-1181Эксплойта нет | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to poppler · poppler · CWE-399 | Средняя4,3 | 3,8 %23 апр. 2009 г. |
18Наблюдать | CVE-2009-0799Эксплойта нет | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to poppler · poppler · CWE-119 | Средняя4,3 | 3,7 %23 апр. 2009 г. |
- CVE-2005-362541В плане
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial
КритическаяCVSS 10,0Эксплойта нетEPSS 3 %libextractor · libextractor31 дек. 2005 г.
- CVE-2009-016541В плане
Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unsp
КритическаяCVSS 10,0Эксплойта нетEPSS 3 %poppler · poppler23 апр. 2009 г.
- CVE-2009-360840В плане
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf
КритическаяCVSS 9,3Эксплойта нетEPSS 10 %poppler · poppler21 окт. 2009 г.
- CVE-2009-360440В плане
The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does
КритическаяCVSS 9,3Эксплойта нетEPSS 8 %kde · kpdf21 окт. 2009 г.
- CVE-2009-360640В плане
Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow
КритическаяCVSS 9,3Эксплойта нетEPSS 8 %poppler · poppler21 окт. 2009 г.
- CVE-2009-360340В плане
Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attacker
КритическаяCVSS 9,3Эксплойта нетEPSS 8 %poppler · poppler21 окт. 2009 г.
- CVE-2009-360739Наблюдать
Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause
КритическаяCVSS 9,3Эксплойта нетEPSS 5 %poppler · poppler21 окт. 2009 г.
- CVE-2008-295035Наблюдать
The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Pa
ВысокаяCVSS 7,5Есть PoCEPSS 15 %poppler · poppler7 июл. 2008 г.
- CVE-2009-118232Наблюдать
Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other pro
ВысокаяCVSS 7,5Эксплойта нетEPSS 7 %poppler · poppler23 апр. 2009 г.
- CVE-2009-117929Наблюдать
Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows
СредняяCVSS 6,8Эксплойта нетEPSS 5 %poppler · poppler23 апр. 2009 г.
- CVE-2009-080029Наблюдать
Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other
СредняяCVSS 6,8Эксплойта нетEPSS 5 %poppler · poppler23 апр. 2009 г.
- CVE-2009-118029Наблюдать
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to
СредняяCVSS 6,8Эксплойта нетEPSS 5 %poppler · poppler23 апр. 2009 г.
- CVE-2009-393829Наблюдать
Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc in Poppler (aka libpoppler) 0.10.6, 0.12.0, and possibly ot
СредняяCVSS 6,8Эксплойта нетEPSS 5 %poppler · poppler13 нояб. 2009 г.
- CVE-2008-169328Наблюдать
The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other
СредняяCVSS 6,8Эксплойта нетEPSS 4 %poppler · poppler18 апр. 2008 г.
- CVE-2009-360528Наблюдать
Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possibly
СредняяCVSS 6,8Эксплойта нетEPSS 4 %poppler · poppler2 нояб. 2009 г.
- CVE-2010-370428Наблюдать
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to
СредняяCVSS 6,8Эксплойта нетEPSS 3 %poppler · poppler5 нояб. 2010 г.
- CVE-2009-075523Наблюдать
The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF
СредняяCVSS 5,0Есть PoCEPSS 10 %poppler · poppler3 мар. 2009 г.
- CVE-2009-075623Наблюдать
The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF
СредняяCVSS 5,0Есть PoCEPSS 10 %poppler · poppler3 мар. 2009 г.
- CVE-2009-118822Наблюдать
Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and
СредняяCVSS 5,0Эксплойта нетEPSS 7 %poppler · poppler23 апр. 2009 г.
- CVE-2009-118722Наблюдать
Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and pos
СредняяCVSS 5,0Эксплойта нетEPSS 7 %poppler · poppler23 апр. 2009 г.
- CVE-2005-362621Наблюдать
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial
СредняяCVSS 5,0Эксплойта нетEPSS 3 %libextractor · libextractor31 дек. 2005 г.
- CVE-2005-362421Наблюдать
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others all
СредняяCVSS 5,0Эксплойта нетEPSS 2 %libextractor · libextractor31 дек. 2005 г.
- CVE-2009-360918Наблюдать
Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kd
СредняяCVSS 4,3Эксплойта нетEPSS 4 %poppler · poppler21 окт. 2009 г.
- CVE-2009-118118Наблюдать
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to
СредняяCVSS 4,3Эксплойта нетEPSS 3 %poppler · poppler23 апр. 2009 г.
- CVE-2009-079918Наблюдать
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to
СредняяCVSS 4,3Эксплойта нетEPSS 3 %poppler · poppler23 апр. 2009 г.