Approved changes feed: RSS · Atom

cpe:2.3:a:xpdfreader:xpdf:3.02:*:*:*:*:*:*:*

part: a version: 3.02 update: *

VendorXpdfreader (ad55fa23-6c7d-5c79-9cd2-81be6f4f6fc0)
ProductXpdf (fa8ac55a-bfef-5aee-a583-678a403d1e25)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/xpdf purl2cpe 2026-06-01 10:10:57.522588
pkg:deb/ubuntu/xpdf purl2cpe 2026-06-01 10:10:57.522589
pkg:github/tmyroadctfig/xpdf purl2cpe 2026-06-01 10:10:57.522590
pkg:rpm/fedora/xpdf purl2cpe 2026-06-01 10:10:57.522592
pkg:rpm/opensuse/xpdf purl2cpe 2026-06-01 10:10:57.522593

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-2142 vulnerable 2026-06-08 05:00:52.979587 Details available
The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.
Published: 2020-01-09T20:42:47.000Z
Updated: 2024-08-06T19:26:08.483Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3387 vulnerable 2026-06-08 04:49:53.924670 Details available
Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.
Published: 2007-07-30T23:00:00.000Z
Updated: 2024-08-07T14:14:13.257Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.