📦

xpdf

Vendor: xpdfreader

Login to add this product to WatchStack
Actively Exploited 1 CISA KEV List
PoC / Exploits 2 Code Available
Total RCEs 15 Remote Access
Total CVEs 111 Total Indexed
Avg. EPSS 1.80% Exploit Prob.
Latest CVE CVE-2024-7868 Aug 15

Security Vulnerability Index

Page 9 / 12
7.5 CVSS
CVE-2010-3702

The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference.

EPSS: 2.76%
6.8 CVSS
CVE-2007-3387

Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.

EPSS: 8.56%