UBUNTU-CVE-2017-6844

Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-6844

Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-6844

PoDoFo 0.9.4 contains a buffer overflow in PoDoFo::PdfParser::ReadXRefSubsection (PdfParser.cpp) that can be triggered by a crafted PDF to achieve unspecified impact. Multiple connected advisories indicate fixes were released (e.g., openSUSE/SUSE-SU-2018:2481-1 and Fedora openSUSE updates) to add...

CVE-2017-6844

Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-6844

Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

PT-2017-17371

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.4 Description A buffer overflow issue exists in the PoDoFo::PdfParser::ReadXRefSubsection function, located in PdfParser.cpp. This issue can be triggered by remote attackers using a crafted file, potentially leading to...

CVE-2017-6844: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

PoDoFo Denial of Service Vulnerability (CNVD-2017-02738)

PoDoFo is an open source , written in C++ using the PDF file format library . PoDoFo 0.9.4 version of the PdfParser.cpp file in the 'PoDoFo::PdfParser::ReadXRefSubsection' function has a security vulnerability. A remote attacker can exploit the vulnerability to cause a denial of service null...

CVE-2017-5855

The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-5855

The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

UBUNTU-CVE-2017-5855

The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-5853

Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-5853

Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

DEBIAN-CVE-2017-5853

Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-5853

Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-5855

The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-5855

PoDoFo 0.9.4 contains a NULL pointer dereference in PoDoFo::PdfParser::ReadXRefSubsection when processing a crafted PDF, enabling denial of service. OpenSUSE/SUSE advisories fix this by upgrading to a newer PoDoFo (e.g., 0.9.6) or applying patches that address CVE-2017-5855. No exploit details or...

CVE-2017-5855

The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-5855: NULL Pointer Dereference

The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...