Поиск уязвимостей
Количество 37
Количество 37
ALT-PU-2023-1100
ALT-PU-2023-1100: package `poppler115` update to version 21.11.0-alt1.p10.1
ALT-PU-2022-3233
ALT-PU-2022-3233: package `poppler-current` update to version 22.11.0-alt1
CVE-2021-30860
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
BDU:2021-05087
Уязвимость операционных систем iPadOS, watchOS, iOS, Mac OS, вызванная целочисленным переполнением, позволяющая нарушителю выполнить произвольный код
BDU:2022-05310
Уязвимость функции JBIG2Stream::readTextRegionSeg() (JBIG2Stream.cc) программного обеспечения для просмотра PDF Xpdf, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVE-2022-38784
Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.
CVE-2022-38784
Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.
CVE-2022-38784
Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.
CVE-2022-38784
Poppler prior to and including 22.08.0 contains an integer overflow in ...
CVE-2022-27337
A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
CVE-2022-27337
A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
CVE-2022-27337
A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
CVE-2022-27337
A logic error in the Hints::Hints function of Poppler v22.03.0 allows ...
ALT-PU-2022-2449
ALT-PU-2022-2449: package `xpdf` update to version 4.04-alt1
ALT-PU-2022-1867
ALT-PU-2022-1867: package `xpdf` update to version 4.04-alt1
SUSE-SU-2023:0677-1
Security update for poppler
SUSE-SU-2023:0495-1
Security update for poppler
RLSA-2023:2810
Moderate: poppler security update
GHSA-5557-33mq-5995
Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.
ELSA-2023-2810
ELSA-2023-2810: poppler security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2023-1100 ALT-PU-2023-1100: package `poppler115` update to version 21.11.0-alt1.p10.1 | CVSS3: 8.8 | почти 4 года назад | |
| ALT-PU-2022-3233 ALT-PU-2022-3233: package `poppler-current` update to version 22.11.0-alt1 | CVSS3: 9.8 | почти 4 года назад | |
 | CVE-2021-30860 An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. | CVSS3: 7.8 | 76% Высокий | около 5 лет назад |
 | BDU:2021-05087 Уязвимость операционных систем iPadOS, watchOS, iOS, Mac OS, вызванная целочисленным переполнением, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 76% Высокий | около 5 лет назад |
| BDU:2022-05310 Уязвимость функции JBIG2Stream::readTextRegionSeg() (JBIG2Stream.cc) программного обеспечения для просмотра PDF Xpdf, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код | CVSS3: 9.8 | 0% Низкий | около 4 лет назад |
 | CVE-2022-38784 Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf. | CVSS3: 7.8 | 1% Низкий | около 4 лет назад |
 | CVE-2022-38784 Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf. | CVSS3: 7.8 | 1% Низкий | около 4 лет назад |
| CVE-2022-38784 Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf. | CVSS3: 7.8 | 1% Низкий | около 4 лет назад |
| CVE-2022-38784 Poppler prior to and including 22.08.0 contains an integer overflow in ... | CVSS3: 7.8 | 1% Низкий | около 4 лет назад |
| CVE-2022-27337 A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. | CVSS3: 6.5 | 2% Низкий | больше 4 лет назад |
| CVE-2022-27337 A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. | CVSS3: 6.5 | 2% Низкий | больше 4 лет назад |
| CVE-2022-27337 A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. | CVSS3: 6.5 | 2% Низкий | больше 4 лет назад |
| CVE-2022-27337 A logic error in the Hints::Hints function of Poppler v22.03.0 allows ... | CVSS3: 6.5 | 2% Низкий | больше 4 лет назад |
| ALT-PU-2022-2449 ALT-PU-2022-2449: package `xpdf` update to version 4.04-alt1 | CVSS3: 8.8 | около 4 лет назад | |
| ALT-PU-2022-1867 ALT-PU-2022-1867: package `xpdf` update to version 4.04-alt1 | CVSS3: 8.8 | больше 4 лет назад | |
 | SUSE-SU-2023:0677-1 Security update for poppler | 1% Низкий | больше 3 лет назад | |
| SUSE-SU-2023:0495-1 Security update for poppler | 1% Низкий | больше 3 лет назад | |
 | RLSA-2023:2810 Moderate: poppler security update | 1% Низкий | больше 3 лет назад | |
| GHSA-5557-33mq-5995 Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf. | CVSS3: 7.8 | 1% Низкий | около 4 лет назад |
| ELSA-2023-2810 ELSA-2023-2810: poppler security update (MODERATE) | 1% Низкий | больше 3 лет назад |
Уязвимостей на страницу