← Back

Xpdfreader

xpdfreader

Vendor: Glyphandcog • 53 CVEs

CVEs (53)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-0165
2Foolabs
Glyphandcog
2Xpdf
Xpdfreader
Apr 23, 2026
Apr 23, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to "g*allocn."
CVE-2009-1183
4Apple
FoolabsGlyphandcog+1 more
4Cups
PopplerXpdf+1 more
Apr 23, 2026
Apr 23, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted PDF file.
CVE-2009-1182
4Apple
FoolabsGlyphandcog+1 more
4Cups
PopplerXpdf+1 more
Apr 23, 2026
Apr 23, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.
CVE-2009-1181
4Apple
FoolabsGlyphandcog+1 more
4Cups
PopplerXpdf+1 more
Apr 23, 2026
Apr 23, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL po...Show more
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference.Show less
CVE-2009-1180
4Apple
FoolabsGlyphandcog+1 more
4Cups
PopplerXpdf+1 more
Apr 23, 2026
Apr 23, 2009
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid da...Show more
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data.Show less
CVE-2009-1179
4Apple
FoolabsGlyphandcog+1 more
4Cups
PopplerXpdf+1 more
Apr 23, 2026
Apr 23, 2009
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.
CVE-2009-0800
4Apple
FoolabsGlyphandcog+1 more
4Cups
PopplerXpdf+1 more
Apr 23, 2026
Apr 23, 2009
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF fil...Show more
Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.Show less
CVE-2009-0799
4Apple
FoolabsGlyphandcog+1 more
4Cups
PopplerXpdf+1 more
Apr 23, 2026
Apr 23, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of...Show more
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read.Show less
CVE-2009-0195
3Apple
FoolabsGlyphandcog
3Cups
XpdfXpdfreader
Apr 23, 2026
Apr 23, 2009
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.
CVE-2009-0166
4Apple
FoolabsGlyphandcog+1 more
4Cups
PopplerXpdf+1 more
Apr 23, 2026
Apr 23, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory.
CVE-2009-0147
3Apple
FoolabsGlyphandcog
3Cups
XpdfXpdfreader
Apr 23, 2026
Apr 23, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) J...Show more
Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.Show less
CVE-2009-0146
3Apple
FoolabsGlyphandcog
3Cups
XpdfXpdfreader
Apr 23, 2026
Apr 23, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JB...Show more
Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2SymbolDict::setBitmap and (2) JBIG2Stream::readSymbolDictSeg.Show less
CVE-2009-1144
2Foolabs
Glyphandcog
2Xpdf
Xpdfreader
Apr 23, 2026
Apr 9, 2009
N/A· v4
N/A· v3
6.9 MEDIUM· v2
Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users to gain privileges via a Trojan horse xpdfrc file in the current working directory, related to an unset SYSTEM_XPDFRC ma...Show more
Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users to gain privileges via a Trojan horse xpdfrc file in the current working directory, related to an unset SYSTEM_XPDFRC macro in a Gentoo build process that uses the poppler library.Show less