Approved changes feed: RSS · Atom
cpe:2.3:a:kde:kpdf:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Kde (d8ba08cf-7ec1-5504-a5b9-f8cfa50ca850) |
|---|---|
| Product | Kpdf (c4b88256-7d13-539d-ab0c-8528422be80f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-3609 |
not_vulnerable | 2026-06-08 04:51:42.912317 |
Details available
Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:10.540Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3608 |
not_vulnerable | 2026-06-08 04:51:42.909009 |
Details available
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:10.520Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3606 |
not_vulnerable | 2026-06-08 04:51:42.885876 |
Details available
Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:11.027Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3604 |
not_vulnerable | 2026-06-08 04:51:42.871643 |
Details available
The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.
Published: 2009-10-21T17:00:00.000Z
Updated: 2024-08-07T06:31:10.557Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2097 |
vulnerable | 2026-06-08 04:48:28.344206 |
Details available
xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.
Published: 2005-08-16T04:00:00.000Z
Updated: 2024-08-07T22:15:37.381Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.