Approved changes feed: RSS · Atom

cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*

part: a version: 2.00 update: *

VendorGlyphandcog (77dadb24-7be5-5a9b-ad5e-57554e60316c)
ProductXpdfreader (fa3194d7-dc1b-5137-9d61-73070bf0757c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-15860 vulnerable 2026-06-08 05:12:58.121366 Details available
Xpdf 2.00 allows a SIGSEGV in XRef::constructXRef in XRef.cc. NOTE: 2.00 is a version from November 2002.
Published: 2019-09-03T06:39:23.000Z
Updated: 2024-08-05T01:03:30.897Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1554 vulnerable 2026-06-08 04:58:00.407120 Details available
Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory read, integer overflow, and invalid pointer dereference, a different vulnerability than CVE-2011-0764.
Published: 2011-03-31T23:00:00.000Z
Updated: 2024-08-06T22:28:41.924Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1553 vulnerable 2026-06-08 04:58:00.405301 Details available
Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different vulnerability than CVE-2011-0764.
Published: 2011-03-31T23:00:00.000Z
Updated: 2024-08-06T22:28:41.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1552 vulnerable 2026-06-08 04:58:00.400252 Details available
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.
Published: 2011-03-31T23:00:00.000Z
Updated: 2024-08-06T22:28:41.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0764 vulnerable 2026-06-08 04:56:39.658759 Details available
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.
Published: 2011-03-31T22:00:00.000Z
Updated: 2024-08-06T22:05:53.382Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3704 vulnerable 2026-06-08 04:55:16.500389 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3604 vulnerable 2026-06-08 04:51:42.872679 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1183 vulnerable 2026-06-08 04:51:13.424471 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1182 vulnerable 2026-06-08 04:51:13.419685 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1181 vulnerable 2026-06-08 04:51:13.414031 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1180 vulnerable 2026-06-08 04:51:13.408693 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1179 vulnerable 2026-06-08 04:51:13.402920 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1144 vulnerable 2026-06-08 04:51:13.188213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0800 vulnerable 2026-06-08 04:51:11.390523 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0799 vulnerable 2026-06-08 04:51:11.386254 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0195 vulnerable 2026-06-08 04:51:08.215899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0166 vulnerable 2026-06-08 04:51:07.947497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0165 vulnerable 2026-06-08 04:51:07.942833 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0147 vulnerable 2026-06-08 04:51:07.828803 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0146 vulnerable 2026-06-08 04:51:07.788845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.