Priority MEDIUM 55
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code,…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09511 · Published 2004-10-26 · Fixed
Priority MEDIUM 52
Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilit…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06209 · Published 2004-10-26 · No fix listed
Priority MEDIUM 49
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated usi…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03823 · Published 2006-01-06 · Fixed CWE-399
Priority MEDIUM 42
Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.06414 · Published 2005-10-20 · No fix listed
Priority MEDIUM 41
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service (application…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05295 · Published 2012-08-20 · No fix listed CWE-119
Priority LOW 38
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the origin…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02986 · Published 2005-02-15 · Fixed
Priority LOW 37
Integer overflow in the KPresenter import filter for Microsoft PowerPoint files (filters/olefilters/lib/klaola.cc) in KOffice before 1.6.1 allows user-assisted remote attackers to execute arbitrary code via a crafted PPT…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04507 · Published 2006-12-03 · Fixed
Priority LOW 29
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null derefer…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03382 · Published 2006-01-06 · Fixed CWE-399
Priority LOW 27
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDe…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02301 · Published 2006-01-06 · Fixed CWE-189