Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,631

Export CSV
CVE-2009-0791

xpdf: multiple integer overflows

Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179.

CVSS 2.0 · 6.8 Medium EPSS 5.5% KEV · Not listed
Vendors
Apple Redhat
Products
Cups Enterprise Linux
CVE-2009-0794

pulse-java integer overflow

Integer overflow in the PulseAudioTargetDataL class in src/java/org/classpath/icedtea/pulseaudio/PulseAudioTargetDataLine.java in Pulse-Java, as used in OpenJDK 1.6.0.0 and other products, allows remote attackers to cause a denial of service (applet crash) via a crafted Pulse Audio source data line.

CVSS 2.0 · 5.0 Medium EPSS 3.0% KEV · Not listed
Vendors
Sun
Products
Openjdk
CVE-2009-1179

PDF JBIG2 integer overflow

Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.

CVSS 2.0 · 6.8 Medium EPSS 5.5% KEV · Not listed
Vendors
Apple Foolabs Glyphandcog and 2 more
Products
Cups Xpdf Xpdfreader and 2 more
CVE-2009-1187

poppler CairoOutputDev integer overflow

Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc).

CVSS 2.0 · 5.0 Medium EPSS 7.2% KEV · Not listed
Vendors
Poppler Redhat
Products
Poppler Enterprise Linux
CVE-2009-1188

xpdf/poppler: SplashBitmap integer overflow

Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.

CVSS 2.0 · 5.0 Medium EPSS 7.2% KEV · Not listed
Vendors
Poppler Redhat
Products
Poppler Enterprise Linux
CVE-2009-1194

pango: pango_glyph_string_set_size integer overflow

Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long glyph string that triggers a heap-based buffer overflow, as demonstrated by a long document.location value in Firefox.

CVSS 2.0 · 6.8 Medium EPSS 4.1% KEV · Not listed
Vendors
Pango Redhat
Products
Pango Enterprise Linux
CVE-2009-1687

kdelibs: Integer overflow in KJS JavaScript garbage collector

The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document that triggers write access to an "offset of a NULL pointer."

CVSS 2.0 · 9.3 Critical EPSS 8.1% KEV · Not listed
Vendors
Apple Redhat
Products
Safari Enterprise Linux
CVE-2009-1720

OpenEXR: Multiple integer overflows

Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer overflows, related to (1) the Imf::PreviewImage::PreviewImage function and (2) compressor constructors. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 7.5 High EPSS 6.4% KEV · Not listed
Vendors
Openexr
Products
Openexr
CVE-2009-1722

OpenEXR: Integer overflow in decompression of range of values in the pixel data

Heap-based buffer overflow in the compression implementation in OpenEXR 1.2.2 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.

CVSS 2.0 · 6.8 Medium EPSS 4.5% KEV · Not listed
Vendors
Openexr
Products
Openexr
CVE-2009-3603

xpdf/poppler: SplashBitmap:: SplashBitmap integer overflow

Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1188.

CVSS 2.0 · 9.3 Critical EPSS 8.6% KEV · Not listed
Vendors
Foolabs Glyphandcog Poppler and 1 more
Products
Xpdf Xpdfreader Poppler and 1 more
CVE-2009-3604

xpdf/poppler: Splash:: drawImage integer overflow and missing allocation return value check

The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.

CVSS 2.0 · 9.3 Critical EPSS 8.7% KEV · Not listed
Vendors
Foolabs Glyphandcog Gnome and 3 more
Products
Xpdf Xpdfreader Gpdf and 3 more
CVE-2009-3605

xpdf: multiple integer overflows

Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, related to (1) glib/poppler-page.cc; (2) ArthurOutputDev.cc, (3) CairoOutputDev.cc, (4) GfxState.cc, (5) JBIG2Stream.cc, (6) PSOutputDev.cc, and (7) SplashOutputDev.cc in poppler/; and (8) SplashBitmap.cc, (9) Splash.cc, and (10) SplashFTFont.cc in splash/. NOTE: this may overlap CVE-2009-0791.

CVSS 2.0 · 6.8 Medium EPSS 4.4% KEV · Not listed
Vendors
Poppler
Products
Poppler
CVE-2009-3606

xpdf/poppler: PSOutputDev:: doImageL1Sep integer overflow

Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.

CVSS 2.0 · 9.3 Critical EPSS 8.6% KEV · Not listed
Vendors
Foolabs Glyphandcog Kde and 2 more
Products
Xpdf Xpdfreader Kpdf and 2 more
CVE-2009-3607

poppler: create_surface_from_thumbnail_data integer overflow

Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 9.3 Critical EPSS 5.9% KEV · Not listed
Vendors
Poppler
Products
Poppler
CVE-2009-3608

xpdf/poppler: integer overflow in ObjectStream::ObjectStream (oCERT-2009-016)

Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.

CVSS 2.0 · 9.3 Critical EPSS 10.2% KEV · Not listed
Vendors
Foolabs Glyph And Cog Glyphandcog and 5 more
Products
Xpdf Pdftops Xpdfreader and 5 more
CVE-2009-3609

xpdf/poppler: ImageStream:: ImageStream integer overflow

Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.

CVSS 2.0 · 4.3 Medium EPSS 4.7% KEV · Not listed
Vendors
Foolabs Glyph And Cog Glyphandcog and 4 more
Products
Xpdf Pdftops Xpdfreader and 4 more
CVE-2009-3638

kernel: kvm: integer overflow in kvm_dev_ioctl_get_supported_cpuid()

Integer overflow in the kvm_dev_ioctl_get_supported_cpuid function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.31.4 allows local users to have an unspecified impact via a KVM_GET_SUPPORTED_CPUID request to the kvm_arch_dev_ioctl function.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Linux
Products
Linux Kernel
CVE-2009-4212

krb: KDC integer overflows in AES and RC4 decryption routines (MITKRB5-SA-2009-004)

Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by providing ciphertext with a length that is too short to be valid.

CVSS 2.0 · 10.0 Critical EPSS 7.6% KEV · Not listed
Vendors
Mit Redhat
Products
Kerberos Kerberos 5 Enterprise Linux and 1 more
CVE-2009-3384

Firefox integer underflow in FTP directory list parser

Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information via a crafted directory listing in a reply.

CVSS 2.0 · 9.3 Critical EPSS 3.5% KEV · Not listed
Vendors
Apple Microsoft Redhat
Products
Safari Windows Enterprise Linux
CVE-2009-1570

Gimp: Integer overflow in the BMP image file plugin

Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow.

CVSS 2.0 · 9.3 Critical EPSS 8.0% KEV · Not listed
Vendors
Gimp Redhat
Products
Gimp Enterprise Linux