flexpaper/pdf2json
GitHub
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 7.8 HIGH | — | ||
A buffer overflow vulnerability in pdf2json v0.70 allows a local attacker to execute arbitrary code via the GString::copy() and ImgOutputDev::ImgOutputDev function. | |||
| 9.8 CRITICAL | 7.5 HIGH | ||
pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch. | |||
| 7.5 HIGH | 5 MEDIUM | ||
pdf2json v0.71 was discovered to contain a NULL pointer dereference in the component ObjectStream::getObject. | |||
| 5.5 MEDIUM | 4.3 MEDIUM | ||
An issue has been found in function EmbedStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a null pointer derefenrece (invalid read of size 8) . | |||
| 5.5 MEDIUM | 4.3 MEDIUM | ||
An issue has been found in function DCTStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a NULL pointer dereference (invalid read of size 1) . | |||
| 5.5 MEDIUM | 4.3 MEDIUM | ||
An issue has been found in function ObjectStream::getObject in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4 . | |||
| 5.5 MEDIUM | 4.3 MEDIUM | ||
An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 1 . | |||
| 5.5 MEDIUM | 4.3 MEDIUM | ||
An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Illegal Use After Free . | |||
| 5.5 MEDIUM | 4.3 MEDIUM | ||
An issue has been found in function vfprintf in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow. | |||
| 5.5 MEDIUM | 4.3 MEDIUM | ||
An issue has been found in function DCTStream::reset in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 8 . | |||
| 5.5 MEDIUM | 4.3 MEDIUM | ||
An issue has been found in function XRef::fetch in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow . | |||
| 5.5 MEDIUM | 4.3 MEDIUM | ||
An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4 . | |||
| 5.5 MEDIUM | 4.3 MEDIUM | ||
An issue has been found in function DCTStream::readHuffSym in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 2 . | |||
| 5.5 MEDIUM | 4.3 MEDIUM | ||
An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an uncaught floating point exception. | |||
| 5.5 MEDIUM | 4.3 MEDIUM | ||
An issue has been found in function Gfx::doShowText in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Use After Free . | |||
| 5.5 MEDIUM | 4.3 MEDIUM | ||
An issue has been found in function CCITTFaxStream::lookChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 2 . | |||
| 7.8 HIGH | 4.6 MEDIUM | ||
Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file. | |||
| — | 6.8 MEDIUM | ||
An issue has been found in PDF2JSON 0.69. The HtmlString class in ImgOutputDev.cc has Mismatched Memory Management Routines (malloc versus operator delete). | |||
| — | 6.8 MEDIUM | ||
An issue has been found in PDF2JSON 0.69. XmlFontAccu::CSStyle in XmlFonts.cc has Mismatched Memory Management Routines (operator new [] versus operator delete). | |||