GCVE - cpe:2.3:a:glyphandcog:xpdfreader:3.02:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:glyphandcog:xpdfreader:3.02:*:*:*:*:*:*:*

part: a version: 3.02 update: *

Vendor	Glyphandcog (`77dadb24-7be5-5a9b-ad5e-57554e60316c`)
Product	Xpdfreader (`fa3194d7-dc1b-5137-9d61-73070bf0757c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-1554`	vulnerable	2026-06-08 04:58:00.407221	Details available Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory read, integer overflow, and invalid pointer dereference, a different vulnerability than CVE-2011-0764. Published: 2011-03-31T23:00:00.000Z Updated: 2024-08-06T22:28:41.924Z Open on db.gcve.eu Reference links http://secunia.com/advisories/43823 http://secunia.com/advisories/48985 http://securityreason.com/securityalert/8171 http://www.kb.cert.org/vuls/id/MAPG-8ECL8X http://www.vupen.com/english/advisories/2011/0728	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1553`	vulnerable	2026-06-08 04:58:00.405401	Details available Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different vulnerability than CVE-2011-0764. Published: 2011-03-31T23:00:00.000Z Updated: 2024-08-06T22:28:41.931Z Open on db.gcve.eu Reference links http://secunia.com/advisories/43823 http://secunia.com/advisories/48985 http://securityreason.com/securityalert/8171 http://www.kb.cert.org/vuls/id/MAPG-8ECL8X http://www.vupen.com/english/advisories/2011/0728	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1552`	vulnerable	2026-06-08 04:58:00.403212	Details available t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764. Published: 2011-03-31T23:00:00.000Z Updated: 2024-08-06T22:28:41.819Z Open on db.gcve.eu Reference links http://secunia.com/advisories/43823 http://secunia.com/advisories/48985 http://securityreason.com/securityalert/8171 http://www.kb.cert.org/vuls/id/MAPG-8ECL8X http://www.vupen.com/english/advisories/2011/0728	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0764`	vulnerable	2026-06-08 04:56:39.662088	Details available t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf. Published: 2011-03-31T22:00:00.000Z Updated: 2024-08-06T22:05:53.382Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2012:002 http://secunia.com/advisories/43823 http://secunia.com/advisories/47347 http://secunia.com/advisories/48985 http://securityreason.com/securityalert/8171	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3704`	vulnerable	2026-06-08 04:55:16.503804	Details available The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption. Published: 2010-11-05T17:00:00.000Z Updated: 2024-08-07T03:18:53.042Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050285.html http://www.openwall.com/lists/oss-security/2010/10/04/6 http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049392.html http://www.redhat.com/support/errata/RHSA-2010-0859.html http://secunia.com/advisories/42357	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3609`	vulnerable	2026-06-08 04:51:42.911417	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3608`	vulnerable	2026-06-08 04:51:42.888846	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3606`	vulnerable	2026-06-08 04:51:42.884921	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3604`	vulnerable	2026-06-08 04:51:42.874338	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3603`	vulnerable	2026-06-08 04:51:42.841412	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.