poppler kayıtları
poppler üreticisine ait 28 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 16
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-189 Numeric Errors11
- CWE-399 Resource Management Errors7
- CWE-20 Improper Input Validation4
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer3
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
28 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2005-3625İstismar yok | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial libextractor · libextractor · CWE-399 | Kritik10,0 | — | %3,8 | 31 Ara 2005 |
41Planlayın | CVE-2009-0165İstismar yok | Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unsppoppler · poppler · CWE-189 | Kritik10,0 | — | %3,5 | 23 Nis 2009 |
40Planlayın | CVE-2009-3608İstismar yok | Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdfpoppler · poppler · CWE-189 | Kritik9,3 | — | %10,2 | 21 Eki 2009 |
40Planlayın | CVE-2009-3604İstismar yok | The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does kde · kpdf · CWE-399 | Kritik9,3 | — | %8,7 | 21 Eki 2009 |
40Planlayın | CVE-2009-3606İstismar yok | Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allowpoppler · poppler · CWE-189 | Kritik9,3 | — | %8,6 | 21 Eki 2009 |
40Planlayın | CVE-2009-3603İstismar yok | Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackerpoppler · poppler · CWE-189 | Kritik9,3 | — | %8,5 | 21 Eki 2009 |
39İzleyin | CVE-2009-3607İstismar yok | Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause poppler · poppler · CWE-189 | Kritik9,3 | — | %5,9 | 21 Eki 2009 |
35İzleyin | CVE-2008-2950Kavram kanıtı | The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Papoppler · poppler · CWE-94 | Yüksek7,5 | — | %15,0 | 7 Tem 2008 |
32İzleyin | CVE-2009-1182İstismar yok | Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other propoppler · poppler · CWE-119 | Yüksek7,5 | — | %7,3 | 23 Nis 2009 |
29İzleyin | CVE-2009-1179İstismar yok | Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows poppler · poppler · CWE-189 | Orta6,8 | — | %5,5 | 23 Nis 2009 |
29İzleyin | CVE-2009-0800İstismar yok | Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and otherpoppler · poppler · CWE-20 | Orta6,8 | — | %5,4 | 23 Nis 2009 |
29İzleyin | CVE-2009-1180İstismar yok | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to poppler · poppler · CWE-399 | Orta6,8 | — | %5,4 | 23 Nis 2009 |
29İzleyin | CVE-2009-3938İstismar yok | Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc in Poppler (aka libpoppler) 0.10.6, 0.12.0, and possibly otpoppler · poppler · CWE-119 | Orta6,8 | — | %5,3 | 13 Kas 2009 |
28İzleyin | CVE-2008-1693İstismar yok | The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other poppler · poppler · CWE-20 | Orta6,8 | — | %4,9 | 18 Nis 2008 |
28İzleyin | CVE-2009-3605İstismar yok | Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possiblypoppler · poppler · CWE-189 | Orta6,8 | — | %4,4 | 2 Kas 2009 |
28İzleyin | CVE-2010-3704İstismar yok | The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up topoppler · poppler · CWE-20 | Orta6,8 | — | %3,5 | 5 Kas 2010 |
23İzleyin | CVE-2009-0755Kavram kanıtı | The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF poppler · poppler | Orta5,0 | — | %10,8 | 3 Mar 2009 |
23İzleyin | CVE-2009-0756Kavram kanıtı | The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF poppler · poppler | Orta5,0 | — | %10,0 | 3 Mar 2009 |
22İzleyin | CVE-2009-1188İstismar yok | Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and poppler · poppler · CWE-189 | Orta5,0 | — | %7,2 | 23 Nis 2009 |
22İzleyin | CVE-2009-1187İstismar yok | Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and pospoppler · poppler · CWE-189 | Orta5,0 | — | %7,1 | 23 Nis 2009 |
21İzleyin | CVE-2005-3626İstismar yok | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial libextractor · libextractor · CWE-399 | Orta5,0 | — | %3,3 | 31 Ara 2005 |
21İzleyin | CVE-2005-3624İstismar yok | The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others alllibextractor · libextractor · CWE-189 | Orta5,0 | — | %2,3 | 31 Ara 2005 |
18İzleyin | CVE-2009-3609İstismar yok | Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdpoppler · poppler · CWE-189 | Orta4,3 | — | %4,6 | 21 Eki 2009 |
18İzleyin | CVE-2009-1181İstismar yok | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to poppler · poppler · CWE-399 | Orta4,3 | — | %3,8 | 23 Nis 2009 |
18İzleyin | CVE-2009-0799İstismar yok | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to poppler · poppler · CWE-119 | Orta4,3 | — | %3,7 | 23 Nis 2009 |
- CVE-2005-362541Planlayın
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial
KritikCVSS 10,0İstismar yokEPSS %3libextractor · libextractor31 Ara 2005
- CVE-2009-016541Planlayın
Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unsp
KritikCVSS 10,0İstismar yokEPSS %3poppler · poppler23 Nis 2009
- CVE-2009-360840Planlayın
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf
KritikCVSS 9,3İstismar yokEPSS %10poppler · poppler21 Eki 2009
- CVE-2009-360440Planlayın
The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does
KritikCVSS 9,3İstismar yokEPSS %8kde · kpdf21 Eki 2009
- CVE-2009-360640Planlayın
Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow
KritikCVSS 9,3İstismar yokEPSS %8poppler · poppler21 Eki 2009
- CVE-2009-360340Planlayın
Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attacker
KritikCVSS 9,3İstismar yokEPSS %8poppler · poppler21 Eki 2009
- CVE-2009-360739İzleyin
Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause
KritikCVSS 9,3İstismar yokEPSS %5poppler · poppler21 Eki 2009
- CVE-2008-295035İzleyin
The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Pa
YüksekCVSS 7,5Kavram kanıtıEPSS %15poppler · poppler7 Tem 2008
- CVE-2009-118232İzleyin
Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other pro
YüksekCVSS 7,5İstismar yokEPSS %7poppler · poppler23 Nis 2009
- CVE-2009-117929İzleyin
Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows
OrtaCVSS 6,8İstismar yokEPSS %5poppler · poppler23 Nis 2009
- CVE-2009-080029İzleyin
Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other
OrtaCVSS 6,8İstismar yokEPSS %5poppler · poppler23 Nis 2009
- CVE-2009-118029İzleyin
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to
OrtaCVSS 6,8İstismar yokEPSS %5poppler · poppler23 Nis 2009
- CVE-2009-393829İzleyin
Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc in Poppler (aka libpoppler) 0.10.6, 0.12.0, and possibly ot
OrtaCVSS 6,8İstismar yokEPSS %5poppler · poppler13 Kas 2009
- CVE-2008-169328İzleyin
The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other
OrtaCVSS 6,8İstismar yokEPSS %4poppler · poppler18 Nis 2008
- CVE-2009-360528İzleyin
Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possibly
OrtaCVSS 6,8İstismar yokEPSS %4poppler · poppler2 Kas 2009
- CVE-2010-370428İzleyin
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to
OrtaCVSS 6,8İstismar yokEPSS %3poppler · poppler5 Kas 2010
- CVE-2009-075523İzleyin
The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF
OrtaCVSS 5,0Kavram kanıtıEPSS %10poppler · poppler3 Mar 2009
- CVE-2009-075623İzleyin
The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF
OrtaCVSS 5,0Kavram kanıtıEPSS %10poppler · poppler3 Mar 2009
- CVE-2009-118822İzleyin
Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and
OrtaCVSS 5,0İstismar yokEPSS %7poppler · poppler23 Nis 2009
- CVE-2009-118722İzleyin
Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and pos
OrtaCVSS 5,0İstismar yokEPSS %7poppler · poppler23 Nis 2009
- CVE-2005-362621İzleyin
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial
OrtaCVSS 5,0İstismar yokEPSS %3libextractor · libextractor31 Ara 2005
- CVE-2005-362421İzleyin
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others all
OrtaCVSS 5,0İstismar yokEPSS %2libextractor · libextractor31 Ara 2005
- CVE-2009-360918İzleyin
Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kd
OrtaCVSS 4,3İstismar yokEPSS %4poppler · poppler21 Eki 2009
- CVE-2009-118118İzleyin
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to
OrtaCVSS 4,3İstismar yokEPSS %3poppler · poppler23 Nis 2009
- CVE-2009-079918İzleyin
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to
OrtaCVSS 4,3İstismar yokEPSS %3poppler · poppler23 Nis 2009