Approved changes feed: RSS · Atom

cpe:2.3:a:glyphandcog:xpdf:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGlyphandcog (77dadb24-7be5-5a9b-ad5e-57554e60316c)
ProductXpdf (6d4cef53-a719-5801-b5be-1a23f77e1261)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/xpdf purl2cpe 2026-06-01 10:14:50.826921
pkg:deb/ubuntu/xpdf purl2cpe 2026-06-01 10:14:50.826923
pkg:github/fluxer/xpdf purl2cpe 2026-06-01 10:14:50.826924
pkg:github/oudream/xpdf purl2cpe 2026-06-01 10:14:50.826926
pkg:rpm/fedora/xpdf purl2cpe 2026-06-01 10:14:50.826927
pkg:rpm/opensuse/xpdf purl2cpe 2026-06-01 10:14:50.826929

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-4568 vulnerable 2026-06-08 06:50:18.173580 Stack overflow in Xpdf 4.05 due to object loop in PDF resources
LOW (2.9)
In Xpdf 4.05 (and earlier), a PDF object loop in the PDF resources leads to infinite recursion and a stack overflow.
Published: 2024-05-06T19:56:15.633Z
Updated: 2024-08-01T20:47:40.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2902 vulnerable 2026-06-08 04:58:09.542051 Details available
zxpdf in xpdf before 3.02-19 as packaged in Debian unstable and 3.02-12+squeeze1 as packaged in Debian squeeze deletes temporary files insecurely, which allows remote attackers to delete arbitrary files via a crafted .pdf.gz file name.
Published: 2018-01-30T20:00:00.000Z
Updated: 2024-08-06T23:15:31.535Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.