Glyph & Cog XpdfReader 3.01
Approved changes feed: RSS · Atom
cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*
part: a version: 3.01 update: *
| Vendor | Glyphandcog (77dadb24-7be5-5a9b-ad5e-57554e60316c) |
|---|---|
| Product | Xpdfreader (fa3194d7-dc1b-5137-9d61-73070bf0757c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-1554 |
vulnerable | 2026-06-08 04:58:00.407205 |
Details available
Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory read, integer overflow, and invalid pointer dereference, a different vulnerability than CVE-2011-0764.
Published: 2011-03-31T23:00:00.000Z
Updated: 2024-08-06T22:28:41.924Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1553 |
vulnerable | 2026-06-08 04:58:00.405384 |
Details available
Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different vulnerability than CVE-2011-0764.
Published: 2011-03-31T23:00:00.000Z
Updated: 2024-08-06T22:28:41.931Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1552 |
vulnerable | 2026-06-08 04:58:00.402721 |
Details available
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.
Published: 2011-03-31T23:00:00.000Z
Updated: 2024-08-06T22:28:41.819Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0764 |
vulnerable | 2026-06-08 04:56:39.661443 |
Details available
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.
Published: 2011-03-31T22:00:00.000Z
Updated: 2024-08-06T22:05:53.382Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3704 |
vulnerable | 2026-06-08 04:55:16.503116 |
Details available
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
Published: 2010-11-05T17:00:00.000Z
Updated: 2024-08-07T03:18:53.042Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3609 |
vulnerable | 2026-06-08 04:51:42.911399 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3608 |
vulnerable | 2026-06-08 04:51:42.888828 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3606 |
vulnerable | 2026-06-08 04:51:42.884904 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3604 |
vulnerable | 2026-06-08 04:51:42.874316 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3603 |
vulnerable | 2026-06-08 04:51:42.840909 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1183 |
vulnerable | 2026-06-08 04:51:13.424553 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1182 |
vulnerable | 2026-06-08 04:51:13.419779 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1181 |
vulnerable | 2026-06-08 04:51:13.414138 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1180 |
vulnerable | 2026-06-08 04:51:13.408801 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1179 |
vulnerable | 2026-06-08 04:51:13.403031 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0800 |
vulnerable | 2026-06-08 04:51:11.390606 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0799 |
vulnerable | 2026-06-08 04:51:11.386340 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0166 |
vulnerable | 2026-06-08 04:51:07.947579 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0165 |
vulnerable | 2026-06-08 04:51:07.942919 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0147 |
vulnerable | 2026-06-08 04:51:07.828883 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0146 |
vulnerable | 2026-06-08 04:51:07.791243 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.