Xpdfreader Xpdf 4.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:xpdfreader:xpdf:4.0.0:*:*:*:*:*:*:*part: a version: 4.0.0 update: *
| Vendor | Xpdfreader (ad55fa23-6c7d-5c79-9cd2-81be6f4f6fc0) |
|---|---|
| Product | Xpdf (fa8ac55a-bfef-5aee-a583-678a403d1e25) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/xpdf |
purl2cpe | 2026-06-01 10:10:57.522670 |
pkg:deb/ubuntu/xpdf |
purl2cpe | 2026-06-01 10:10:57.522672 |
pkg:github/tmyroadctfig/xpdf |
purl2cpe | 2026-06-01 10:10:57.522673 |
pkg:rpm/fedora/xpdf |
purl2cpe | 2026-06-01 10:10:57.522674 |
pkg:rpm/opensuse/xpdf |
purl2cpe | 2026-06-01 10:10:57.522676 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-9878 |
vulnerable | 2026-06-08 05:14:26.364337 |
Details available
There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Published: 2019-03-19T18:16:53.000Z
Updated: 2024-08-04T22:01:55.144Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.