CVEs (6)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
18Conectiva DebianEasy Software Products+15 more33Cups Debian LinuxEnterprise Linux+30 moreApr 16, 2026 Dec 31, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null derefer...Show more |
18Conectiva DebianEasy Software Products+15 more33Cups Debian LinuxEnterprise Linux+30 moreApr 16, 2026 Dec 31, 2005 N/A· v4 N/A· v3 10.0 HIGH· v2 Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated usi...Show more |
18Conectiva DebianEasy Software Products+15 more33Cups Debian LinuxEnterprise Linux+30 moreApr 16, 2026 Dec 31, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDe...Show more |
7Freebsd GentooGnu+4 more13Enterprise Linux Enterprise Linux DesktopFreebsd+10 moreApr 16, 2026 May 2, 2005 N/A· v4 N/A· v3 3.7 LOW· v2 Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose perm...Show more |
2Gnu Turbolinux4A2ps Turbolinux HomeTurbolinux Server+1 moreApr 16, 2026 Dec 27, 2004 N/A· v4 N/A· v3 2.1 LOW· v2 The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files. |
8Apache DebianGentoo+5 more12Debian Linux Enterprise LinuxEnterprise Linux Desktop+9 moreApr 16, 2026 Sep 16, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access. |