Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Glyphandcog Subscribe
Filtered by product Xpdf
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-16927 1 Glyphandcog 1 Xpdf 2019-10-01 4.3 MEDIUM 5.5 MEDIUM
Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877.
CVE-2011-2902 2 Debian, Glyphandcog 2 Debian Linux, Xpdf 2018-02-23 6.4 MEDIUM 5.3 MEDIUM
zxpdf in xpdf before 3.02-19 as packaged in Debian unstable and 3.02-12+squeeze1 as packaged in Debian squeeze deletes temporary files insecurely, which allows remote attackers to delete arbitrary files via a crafted .pdf.gz file name.