Approved changes feed: RSS · Atom

cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGlyphandcog (77dadb24-7be5-5a9b-ad5e-57554e60316c)
ProductXpdfreader (fa3194d7-dc1b-5137-9d61-73070bf0757c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-24107 vulnerable 2026-06-08 05:40:59.619435 Details available
Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc.
Published: 2022-08-30T03:04:49.762Z
Updated: 2024-09-17T02:42:28.252Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24106 vulnerable 2026-06-08 05:40:59.619054 Details available
In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown integer-related vulnerability in Stream.cc.
Published: 2022-08-30T03:05:08.438Z
Updated: 2024-09-16T19:15:21.063Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1554 vulnerable 2026-06-08 04:58:00.406895 Details available
Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory read, integer overflow, and invalid pointer dereference, a different vulnerability than CVE-2011-0764.
Published: 2011-03-31T23:00:00.000Z
Updated: 2024-08-06T22:28:41.924Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1553 vulnerable 2026-06-08 04:58:00.404830 Details available
Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different vulnerability than CVE-2011-0764.
Published: 2011-03-31T23:00:00.000Z
Updated: 2024-08-06T22:28:41.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1552 vulnerable 2026-06-08 04:58:00.391231 Details available
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.
Published: 2011-03-31T23:00:00.000Z
Updated: 2024-08-06T22:28:41.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0764 vulnerable 2026-06-08 04:56:39.651435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3704 vulnerable 2026-06-08 04:55:16.492218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1183 vulnerable 2026-06-08 04:51:13.424228 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1182 vulnerable 2026-06-08 04:51:13.419427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1181 vulnerable 2026-06-08 04:51:13.413746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1180 vulnerable 2026-06-08 04:51:13.408394 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1179 vulnerable 2026-06-08 04:51:13.402612 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1144 vulnerable 2026-06-08 04:51:13.187973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0800 vulnerable 2026-06-08 04:51:11.390296 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0799 vulnerable 2026-06-08 04:51:11.386011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0195 vulnerable 2026-06-08 04:51:08.215650 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0166 vulnerable 2026-06-08 04:51:07.947268 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0165 vulnerable 2026-06-08 04:51:07.942556 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0147 vulnerable 2026-06-08 04:51:07.828571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0146 vulnerable 2026-06-08 04:51:07.781391 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.