Vulnerabilities > Freedesktop > Poppler > 0.14.2
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2014-01-26 | CVE-2013-7296 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Freedesktop Poppler The JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the correct specifier within a format string, which allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted PDF file. | 5.0 |
2013-11-23 | CVE-2013-4474 | Improper Input Validation vulnerability in multiple products Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service (crash) via format string specifiers in a destination filename. | 5.0 |
2013-11-23 | CVE-2013-4473 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a source filename. | 7.5 |
2013-04-09 | CVE-2013-1790 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Freedesktop Poppler poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function. | 6.8 |
2013-04-09 | CVE-2013-1789 | Denial of Service vulnerability in Poppler splash/Splash.cc in poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to the (1) Splash::arbitraryTransformMask, (2) Splash::blitMask, and (3) Splash::scaleMaskYuXu functions. network freedesktop | 4.3 |
2013-04-09 | CVE-2013-1788 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Freedesktop Poppler poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger an "invalid memory access" in (1) splash/Splash.cc, (2) poppler/Function.cc, and (3) poppler/Stream.cc. | 6.8 |
2010-11-05 | CVE-2010-3702 | Null Pointer Dereference vulnerability in multiple products The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference. network low complexity apple freedesktop xpdfreader fedoraproject opensuse suse debian redhat canonical CWE-476 | 7.5 |