Search CVE reports


Toggle filters

1 – 10 of 52 results


CVE-2010-0207

Negligible priority
Ignored

In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (application crash) in xpdf-based PDF viewers.

6 affected packages

ipe, kdegraphics, koffice, libextractor, poppler, xpdf

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
ipe
kdegraphics
koffice
libextractor
poppler
xpdf
Show less packages

CVE-2010-0206

Negligible priority
Ignored

xpdf allows remote attackers to cause a denial of service (NULL pointer dereference and crash) in the way it processes JBIG2 PDF stream objects.

6 affected packages

ipe, kdegraphics, koffice, libextractor, poppler, xpdf

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
ipe
kdegraphics
koffice
libextractor
poppler
xpdf
Show less packages

CVE-2010-3704

Medium priority

Some fixes available 9 of 75

The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to...

11 affected packages

gpdf, ipe, kdegraphics, koffice, libextractor...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
gpdf Not in release Not in release Not in release Not in release Not in release
ipe Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
kdegraphics Not in release Not in release Not in release Not in release Not in release
koffice Not in release Not in release Not in release Not in release Not in release
libextractor Not affected Not affected Not affected Not affected Not affected
pdfkit.framework Not in release Not in release Not in release Not in release Not in release
pdftohtml Not in release Not in release Not in release Not in release Not in release
poppler Not affected Not affected Not affected Not affected Not affected
tetex-bin Not in release Not in release Not in release Not in release Not in release
texlive-bin Not affected Not affected Not affected Not affected Not affected
xpdf Not affected Not affected Not in release Not affected Not affected
Show all 11 packages Show less packages

CVE-2010-3703

Medium priority

Some fixes available 4 of 72

The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a...

11 affected packages

gpdf, ipe, kdegraphics, koffice, libextractor...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
gpdf Not in release Not in release Not in release Not in release Not in release
ipe Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
kdegraphics Not in release Not in release Not in release Not in release Not in release
koffice Not in release Not in release Not in release Not in release Not in release
libextractor Not affected Not affected Not affected Not affected Not affected
pdfkit.framework Not in release Not in release Not in release Not in release Not in release
pdftohtml Not in release Not in release Not in release Not in release Not in release
poppler Not affected Not affected Not affected Not affected Not affected
tetex-bin Not in release Not in release Not in release Not in release Not in release
texlive-bin Not affected Not affected Not affected Not affected Not affected
xpdf Not affected Not affected Not in release Not affected Not affected
Show all 11 packages Show less packages

CVE-2010-3702

Medium priority

Some fixes available 9 of 75

The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of...

11 affected packages

gpdf, ipe, kdegraphics, koffice, libextractor...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
gpdf Not in release Not in release Not in release Not in release Not in release
ipe Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
kdegraphics Not in release Not in release Not in release Not in release Not in release
koffice Not in release Not in release Not in release Not in release Not in release
libextractor Not affected Not affected Not affected Not affected Not affected
pdfkit.framework Not in release Not in release Not in release Not in release Not in release
pdftohtml Not in release Not in release Not in release Not in release Not in release
poppler Not affected Not affected Not affected Not affected Not affected
tetex-bin Not in release Not in release Not in release Not in release Not in release
texlive-bin Not affected Not affected Not affected Not affected Not affected
xpdf Not affected Not affected Not in release Not affected Not affected
Show all 11 packages Show less packages

CVE-2010-2575

Medium priority
Fixed

Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial...

1 affected packages

kdegraphics

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
kdegraphics
Show less packages

CVE-2009-4035

Low priority
Not affected

The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows...

3 affected packages

kdegraphics, poppler, xpdf

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
kdegraphics
poppler
xpdf
Show less packages

CVE-2009-3609

Medium priority

Some fixes available 38 of 106

Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service...

11 affected packages

gpdf, ipe, kdegraphics, koffice, libextractor...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
gpdf Not in release Not in release Not in release Not in release Not in release
ipe Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
kdegraphics Not in release Not in release Not in release Not in release Not in release
koffice Not in release Not in release Not in release Not in release Not in release
libextractor Not affected Not affected Not affected Not affected Not affected
pdfkit.framework Not in release Not in release Not in release Not in release Not in release
pdftohtml Not in release Not in release Not in release Not in release Not in release
poppler Fixed Fixed Fixed Fixed Fixed
tetex-bin Not in release Not in release Not in release Not in release Not in release
texlive-bin Not affected Not affected Not affected Not affected Not affected
xpdf Not affected Not affected Not in release Not affected Not affected
Show all 11 packages Show less packages

CVE-2009-3608

Medium priority

Some fixes available 38 of 106

Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute...

11 affected packages

gpdf, ipe, kdegraphics, koffice, libextractor...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
gpdf Not in release Not in release Not in release Not in release Not in release
ipe Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
kdegraphics Not in release Not in release Not in release Not in release Not in release
koffice Not in release Not in release Not in release Not in release Not in release
libextractor Not affected Not affected Not affected Not affected Not affected
pdfkit.framework Not in release Not in release Not in release Not in release Not in release
pdftohtml Not in release Not in release Not in release Not in release Not in release
poppler Fixed Fixed Fixed Fixed Fixed
tetex-bin Not in release Not in release Not in release Not in release Not in release
texlive-bin Not affected Not affected Not affected Not affected Not affected
xpdf Not affected Not affected Not in release Not affected Not affected
Show all 11 packages Show less packages

CVE-2009-3606

Medium priority

Some fixes available 7 of 75

Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a...

11 affected packages

gpdf, ipe, kdegraphics, koffice, libextractor...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
gpdf Not in release Not in release Not in release Not in release Not in release
ipe Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
kdegraphics Not in release Not in release Not in release Not in release Not in release
koffice Not in release Not in release Not in release Not in release Not in release
libextractor Not affected Not affected Not affected Not affected Not affected
pdfkit.framework Not in release Not in release Not in release Not in release Not in release
pdftohtml Not in release Not in release Not in release Not in release Not in release
poppler Not affected Not affected Not affected Not affected Not affected
tetex-bin Not in release Not in release Not in release Not in release Not in release
texlive-bin Not affected Not affected Not affected Not affected Not affected
xpdf Not affected Not affected Not in release Not affected Not affected
Show all 11 packages Show less packages