Поиск уязвимостей
Количество 16
Количество 16
ALT-PU-2021-1186
ALT-PU-2021-1186: package `xpdf` update to version 4.03-alt1
CVE-2020-25725
In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, which causes an `heap-use-after-free` problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to another char in the same Type 3 font.
CVE-2020-25725
In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, which causes an `heap-use-after-free` problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to another char in the same Type 3 font.
CVE-2020-25725
In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOut ...
GHSA-r454-8j2h-fwqp
In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, which causes an `heap-use-after-free` problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to another char in the same Type 3 font.
CVE-2020-35376
Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp() function.
CVE-2020-35376
Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp() function.
CVE-2020-35376
Xpdf 4.02 allows stack consumption because of an incorrect subroutine ...
CVE-2022-48545
An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02.
CVE-2022-48545
An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02.
CVE-2022-48545
An infinite recursion in Catalog::findDestInTree can cause denial of s ...
GHSA-2jg5-5mqp-735q
Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp() function.
GHSA-x23x-4p2x-538q
An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02.
BDU:2023-07872
Уязвимость функции Catalog::findDestInTree() программного обеспечения для просмотра PDF Xpdf, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2023:4546-1
Security update for poppler
SUSE-SU-2023:4362-1
Security update for poppler
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2021-1186 ALT-PU-2021-1186: package `xpdf` update to version 4.03-alt1 | CVSS3: 7.5 | почти 6 лет назад | |
 | CVE-2020-25725 In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, which causes an `heap-use-after-free` problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to another char in the same Type 3 font. | CVSS3: 5.5 | 1% Низкий | почти 6 лет назад |
 | CVE-2020-25725 In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, which causes an `heap-use-after-free` problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to another char in the same Type 3 font. | CVSS3: 5.5 | 1% Низкий | почти 6 лет назад |
| CVE-2020-25725 In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOut ... | CVSS3: 5.5 | 1% Низкий | почти 6 лет назад |
| GHSA-r454-8j2h-fwqp In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, which causes an `heap-use-after-free` problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to another char in the same Type 3 font. | CVSS3: 5.5 | 1% Низкий | больше 4 лет назад |
| CVE-2020-35376 Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp() function. | CVSS3: 7.5 | 2% Низкий | почти 6 лет назад |
| CVE-2020-35376 Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp() function. | CVSS3: 7.5 | 2% Низкий | почти 6 лет назад |
| CVE-2020-35376 Xpdf 4.02 allows stack consumption because of an incorrect subroutine ... | CVSS3: 7.5 | 2% Низкий | почти 6 лет назад |
| CVE-2022-48545 An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02. | CVSS3: 5.5 | 0% Низкий | около 3 лет назад |
| CVE-2022-48545 An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02. | CVSS3: 5.5 | 0% Низкий | около 3 лет назад |
| CVE-2022-48545 An infinite recursion in Catalog::findDestInTree can cause denial of s ... | CVSS3: 5.5 | 0% Низкий | около 3 лет назад |
| GHSA-2jg5-5mqp-735q Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp() function. | 2% Низкий | больше 4 лет назад | |
| GHSA-x23x-4p2x-538q An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02. | CVSS3: 5.5 | 0% Низкий | около 3 лет назад |
 | BDU:2023-07872 Уязвимость функции Catalog::findDestInTree() программного обеспечения для просмотра PDF Xpdf, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.5 | 0% Низкий | почти 6 лет назад |
 | SUSE-SU-2023:4546-1 Security update for poppler | почти 3 года назад | ||
| SUSE-SU-2023:4362-1 Security update for poppler | около 3 лет назад |
Уязвимостей на страницу