[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGq4mTEx_OtM0tdcGqwXlUXMp8XJLtdawC4AzakbBJ4A":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":76,"topProductsByCves":77,"seoMetadata":79,"meta":88},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":18},36146,"xpdf",1,26,0,39,"2009-12-21","x",[16],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},174361,"Xpdf is a technology vendor with 1 tracked product and 26 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[20,29,36,41,47,53,57,60,67,71],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":28},"CVE-2003-0434","Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.","2003-07-24",7.5,"v2","High",false,0.40942,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":35},"CVE-2004-0888","Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.","2005-01-27",10,"Critical",0.09511,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":40},"CVE-2005-0064","Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large \u002FEncrypt \u002FLength keyLength value.","2005-05-02",0.07217,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":46},"CVE-2007-4352","Array index error in the DCTStream::readProgressiveDataUnit method in xpdf\u002FStream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file.","2007-11-08",7.6,0.0702,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":52},"CVE-2004-1125","Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.","2005-01-10",9.3,0.06576,{"cveId":54,"description":55,"publishedDate":44,"cvssScore":51,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":56},"CVE-2007-5393","Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf\u002FStream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter.",0.06408,{"cveId":58,"description":59,"publishedDate":44,"cvssScore":51,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":56},"CVE-2007-5392","Integer overflow in the DCTStream::reset method in xpdf\u002FStream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.",{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":25,"severity":65,"isKev":27,"epssScore":66},"CVE-2007-0104","The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.","2007-01-09",6.8,"Medium",0.06229,{"cveId":68,"description":69,"publishedDate":32,"cvssScore":33,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":70},"CVE-2004-0889","Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888.",0.06209,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":75},"CVE-2005-3192","Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.","2005-12-08",0.0614,[],[78],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":80,"metaDescription":81,"keywords":82,"structuredData":83},"Xpdf - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Xpdf covering 1 product with 26 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Xpdf vulnerabilities, Xpdf security, Xpdf CVE, Xpdf threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":84,"@type":85,"name":86,"description":81,"url":87},"https:\u002F\u002Fschema.org","Organization","Xpdf","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fxpdf",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":89,"apiVersion":90},"2026-10-17T15:13:47.919Z","3.0"]