Gnome Gpdf vulnerabilities

5 CVEs affecting Gnome Gpdf, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-4035, published 2009-12-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-0888, published 2005-01-27. High severity, CVSS 10.0. EPSS: 9.5% chance of exploitation in the next 30 days. Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly…
CVE-2004-0889, published 2005-01-27. High severity, CVSS 10.0. EPSS: 6.2% chance of exploitation in the next 30 days. Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a…
CVE-2009-4035, published 2009-12-21. High severity, CVSS 9.3. EPSS: 3.8% chance of exploitation in the next 30 days. The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine…
CVE-2005-0206, published 2005-04-27. High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days. The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users…
CVE-2006-1244, published 2006-03-15. High severity, CVSS 7.6. EPSS: 2.2% chance of exploitation in the next 30 days. Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and…