Glyphandcog: >> Xpdfreader >> 2.00 Security Vulnerabilities
The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted PDF file.
CVSS Score
4.3
EPSS Score
0.012
Published
2009-04-23
Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users to gain privileges via a Trojan horse xpdfrc file in the current working directory, related to an unset SYSTEM_XPDFRC macro in a Gentoo build process that uses the poppler library.
CVSS Score
6.9
EPSS Score
0.001
Published
2009-04-09
Page 3