Approved changes feed: RSS · Atom

cpe:2.3:a:xpdfreader:xpdf:4.00:*:*:*:*:*:*:*

part: a version: 4.00 update: *

VendorXpdfreader (ad55fa23-6c7d-5c79-9cd2-81be6f4f6fc0)
ProductXpdf (fa8ac55a-bfef-5aee-a583-678a403d1e25)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/xpdf purl2cpe 2026-06-01 10:10:57.522677
pkg:deb/ubuntu/xpdf purl2cpe 2026-06-01 10:10:57.522678
pkg:github/tmyroadctfig/xpdf purl2cpe 2026-06-01 10:10:57.522680
pkg:rpm/fedora/xpdf purl2cpe 2026-06-01 10:10:57.522681
pkg:rpm/opensuse/xpdf purl2cpe 2026-06-01 10:10:57.522682

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-8107 vulnerable 2026-06-08 05:12:05.204663 Details available
The JPXStream::close function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and application crash) via a specific pdf file, as demonstrated by pdftohtml.
Published: 2018-03-14T03:00:00.000Z
Updated: 2024-09-17T04:10:05.479Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8106 vulnerable 2026-06-08 05:12:05.204253 Details available
The JPXStream::readTilePartData function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and application crash) via a specific pdf file, as demonstrated by pdftohtml.
Published: 2018-03-14T03:00:00.000Z
Updated: 2024-09-17T03:27:34.013Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8105 vulnerable 2026-06-08 05:12:05.203972 Details available
The JPXStream::fillReadBuf function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and application crash) via a specific pdf file, as demonstrated by pdftohtml.
Published: 2018-03-14T03:00:00.000Z
Updated: 2024-09-16T23:00:59.873Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8104 vulnerable 2026-06-08 05:12:05.203621 Details available
The BufStream::lookChar function in Stream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and application crash) via a specific pdf file, as demonstrated by pdftohtml.
Published: 2018-03-14T03:00:00.000Z
Updated: 2024-09-16T19:09:18.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8103 vulnerable 2026-06-08 05:12:05.203362 Details available
The JBIG2Stream::readGenericBitmap function in JBIG2Stream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and application crash) via a specific pdf file, as demonstrated by pdftohtml.
Published: 2018-03-14T03:00:00.000Z
Updated: 2024-09-17T02:41:29.061Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8102 vulnerable 2026-06-08 05:12:05.203097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8101 vulnerable 2026-06-08 05:12:05.202738 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8100 vulnerable 2026-06-08 05:12:05.202446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7455 vulnerable 2026-06-08 05:12:03.709496 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7454 vulnerable 2026-06-08 05:12:03.709070 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7453 vulnerable 2026-06-08 05:12:03.708776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7452 vulnerable 2026-06-08 05:12:03.708390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7175 vulnerable 2026-06-08 05:11:55.105664 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7174 vulnerable 2026-06-08 05:11:55.105366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7173 vulnerable 2026-06-08 05:11:55.104972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18651 vulnerable 2026-06-08 05:11:14.420250 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18650 vulnerable 2026-06-08 05:11:14.419869 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18459 vulnerable 2026-06-08 05:11:14.019500 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18458 vulnerable 2026-06-08 05:11:14.019207 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18457 vulnerable 2026-06-08 05:11:14.018911 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18456 vulnerable 2026-06-08 05:11:14.018613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18455 vulnerable 2026-06-08 05:11:14.018196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18454 vulnerable 2026-06-08 05:11:14.017618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16369 vulnerable 2026-06-08 05:11:04.767670 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16368 vulnerable 2026-06-08 05:11:04.767169 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11033 vulnerable 2026-06-08 05:10:37.639292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.