Foolabs - vulnerabilities (CVEs)

23 CVEs in 1 products, 0 in the last 30 days, newest from 2011-03-31.

Products

• Xpdf - 23 CVEs

Newest CVEs of Foolabs

• CVE-2011-1553 - CVSS 4.3 (medium), 2011-03-31: Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial…
• CVE-2011-1552 - CVSS 4.3 (medium), 2011-03-31: t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to…
• CVE-2011-1554 - CVSS 4.3 (medium), 2011-03-31: Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service…
• CVE-2011-0764 - CVSS 6.8 (medium), 2011-03-31: t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which…
• CVE-2010-3704 - CVSS 6.8 (medium), 2010-11-05: The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1,…
• CVE-2009-3604 - CVSS 9.3 (critical), 2009-10-21: The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly…
• CVE-2009-3609 - CVSS 4.3 (medium), 2009-10-21: Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF,…
• CVE-2009-3603 - CVSS 9.3 (critical), 2009-10-21: Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute…
• CVE-2009-3608 - CVSS 9.3 (critical), 2009-10-21: Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics…
• CVE-2009-3606 - CVSS 9.3 (critical), 2009-10-21: Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers…
• CVE-2009-0165 - CVSS 10 (critical), 2009-04-23: Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact,…
• CVE-2009-0147 - CVSS 4.3 (medium), 2009-04-23: Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a…
• CVE-2009-0799 - CVSS 4.3 (medium), 2009-04-23: The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of…
• CVE-2009-1180 - CVSS 6.8 (medium), 2009-04-23: The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary…
• CVE-2009-1183 - CVSS 4.3 (medium), 2009-04-23: The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial…
• CVE-2009-0146 - CVSS 4.3 (medium), 2009-04-23: Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a…
• CVE-2009-0195 - CVSS 6.8 (medium), 2009-04-23: Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF…
• CVE-2009-1179 - CVSS 6.8 (medium), 2009-04-23: Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers…
• CVE-2009-1182 - CVSS 7.5 (high), 2009-04-23: Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote…
• CVE-2009-0166 - CVSS 4.3 (medium), 2009-04-23: The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a…
• CVE-2009-0800 - CVSS 6.8 (medium), 2009-04-23: Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow…
• CVE-2009-1181 - CVSS 4.3 (medium), 2009-04-23: The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of…
• CVE-2009-1144 - CVSS 6.9 (medium), 2009-04-09: Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users to gain privileges via a Trojan horse xpdfrc file in the…