GCVE - cpe:2.3:a:glyphandcog:xpdfreader:4.01:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:glyphandcog:xpdfreader:4.01:*:*:*:*:*:*:*

part: a version: 4.01 update: *

Vendor	Glyphandcog (`77dadb24-7be5-5a9b-ad5e-57554e60316c`)
Product	Xpdfreader (`fa3194d7-dc1b-5137-9d61-73070bf0757c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-9589`	vulnerable	2026-06-08 05:14:25.775404	Details available There is a NULL pointer dereference vulnerability in PSOutputDev::setupResources() located in PSOutputDev.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. Published: 2019-03-06T08:00:00.000Z Updated: 2024-08-04T21:54:44.687Z Open on db.gcve.eu Reference links https://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-function-psoutputdevsetupresources-xpdf-4-01/ https://forum.xpdfreader.com/viewtopic.php?f=3&t=41262	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-9588`	vulnerable	2026-06-08 05:14:25.774949	Details available There is an Invalid memory access in gAtomicIncrement() located at GMutex.h in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. Published: 2019-03-06T08:00:00.000Z Updated: 2024-08-04T21:54:44.602Z Open on db.gcve.eu Reference links https://research.loginsoft.com/bugs/invalid-memory-access-in-gatomiccounter-gatomicincrement-xpdf-4-01/ https://forum.xpdfreader.com/viewtopic.php?f=3&t=41261	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-9587`	vulnerable	2026-06-08 05:14:25.774534	Details available There is a stack consumption issue in md5Round1() located in Decrypt.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to Catalog::countPageTree. Published: 2019-03-06T08:00:00.000Z Updated: 2024-08-04T21:54:44.504Z Open on db.gcve.eu Reference links https://forum.xpdfreader.com/viewtopic.php?f=3&t=41263 https://research.loginsoft.com/bugs/stack-based-buffer-overflow-vulnerability-in-function-md5round1-xpdf-4-01/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.