This page displays vulnerability information about FreeBSD Ports.
The VUXML data was last processed by FreshPorts on 2024-05-21 14:03:59 UTC
List all Vulnerabilities, by package
List all Vulnerabilities, by date
k68These are the vulnerabilities relating to the commit you have selected:
VuXML ID | Description |
---|---|
2747fc39-915b-11dc-9239-001c2514716c | xpdf -- multiple remote Stream.CC vulnerabilities Secunia Research reports:
Discovery 2007-11-07 Entry 2007-11-12 Modified 2007-11-14 cups-base < 1.3.3_2 gpdf gt 0 kdegraphics < 3.5.8_1 koffice < 1.6.3_3,2 poppler < 0.6 xpdf < 3.02_5 26367 CVE-2007-4352 CVE-2007-5392 CVE-2007-5393 |
24eee285-09c7-11da-bc08-0001020eed82 | xpdf -- disk fill DoS vulnerability xpdf is vulnerable to a denial of service vulnerability which can cause xpdf to create an infinitely large file, thereby filling up the /tmp partition, when opening a specially crafted PDF file. Note that several applications contains an embedded version of xpdf, therefor making them the vulnerable to the same DoS. In CUPS this vulnerability would cause the pdftops filter to crash. Discovery 2005-08-09 Entry 2005-08-12 Modified 2005-09-07 xpdf < 3.00_7 kdegraphics < 3.4.2 gpdf < 2.10.0_2 cups-base < 1.1.23.0_5 14529 CVE-2005-2097 http://rhn.redhat.com/errata/RHSA-2005-670.html http://www.kde.org/info/security/advisory-20050809-1.txt |
f755545e-6fcd-11d9-abec-00061bd2d56f | xpdf -- makeFileKey2() buffer overflow vulnerability An iDEFENSE Security Advisory reports:
Discovery 2005-01-06 Entry 2005-01-26 Modified 2005-02-03 xpdf < 3.00_6 kdegraphics < 3.3.2_2 gpdf < 2.8.3 teTeX-base < 2.0.2_9 cups-base < 1.1.23.0_3 koffice < 1.3.5_2,1 pdftohtml < 0.36_2 CVE-2005-0064 http://marc.theaimsgroup.com/?l=bugtraq&m=110608898221554 http://www.koffice.org/security/advisory-20050120-1.txt |
8581189c-bd5f-11de-8709-0017a4cccfc6 | Xpdf -- Multiple Vulnerabilities SecurityFocus reports:
Discovery 2009-10-14 Entry 2009-10-20 xpdf < 3.02_11 http://www.securityfocus.com/archive/1/507261 http://secunia.com/advisories/37053/ |
e3e266e9-5473-11d9-a9e7-0001020eed82 | xpdf -- buffer overflow vulnerability An iDEFENSE Security Advisory reports:
Discovery 2004-11-23 Entry 2004-12-23 Modified 2005-01-13 xpdf < 3.00_5 kdegraphics < 3.3.2_1 gpdf le 2.8.1 teTeX-base le 2.0.2_6 cups-base le 1.1.22.0 koffice le 1.3.5,1 pdftohtml < 0.36_1 CVE-2004-1125 http://www.idefense.com/application/poi/display?id=172&type=vulnerabilities |
791e8f79-e7d1-11e9-8b31-206a8a720317 | Xpdf -- Multiple Vulnerabilities Xpdf 4.02 fixes two vulnerabilities. Both fixes have been backported to 3.04.
Discovery 2019-10-01 Entry 2019-10-06 xpdf < 4.02,1 xpdf4 < 4.02,1 xpdf3 < 3.04_11 https://nvd.nist.gov/vuln/detail/CVE-2019-9877 https://nvd.nist.gov/vuln/detail/CVE-2019-16927 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9877 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1692 |
ad2f3337-26bf-11d9-9289-000c41e2cdad | xpdf -- integer overflow vulnerabilities Chris Evans discovered several integer arithmetic overflows in the xpdf 2 and xpdf 3 code bases. The flaws have impacts ranging from denial-of-service to arbitrary code execution. Discovery 2004-10-21 Entry 2004-10-25 gpdf cups-base < 1.1.22.0 xpdf < 3.00_4 kdegraphics < 3.3.0_1 koffice < 1.3.2_1,1 teTeX-base < 2.0.2_4 CVE-2004-0888 CVE-2004-0889 http://scary.beasts.org/security/CESA-2004-002.txt http://scary.beasts.org/security/CESA-2004-007.txt http://www.kde.org/info/security/advisory-20041021-1.txt |
a21037d5-2c38-11de-ab3b-0017a4cccfc6 | xpdf -- multiple vulnerabilities Secunia reports:
Discovery 2009-04-16 Entry 2009-04-18 Modified 2009-04-18 xpdf < 3.02_11 CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 http://secunia.com/advisories/34291 http://www.vupen.com/english/advisories/2009/1065 |
0e43a14d-3f3f-11dc-a79a-0016179b2dd5 | xpdf -- stack based buffer overflow The KDE Team reports:
Discovery 2007-07-30 Entry 2007-07-31 Modified 2009-04-29 xpdf < 3.02_2 kdegraphics < 3.5.7_1 cups-base < 1.2.11_3 gpdf gt 0 pdftohtml < 0.39_3 poppler < 0.5.9_4 25124 CVE-2007-3387 http://www.kde.org/info/security/advisory-20070730-1.txt |