CVE-2018-8000

In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken in PdfTokenizer.cpp, a related issue to CVE-2017-5886. Remote attackers could leverage this vulnerability to cause a denial-of-service or potentially execute arbitrary code via a crafted...

CVE-2018-8000: Out-of-bounds Write

In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken in PdfTokenizer.cpp, a related issue to CVE-2017-5886. Remote attackers could leverage this vulnerability to cause a denial-of-service or potentially execute arbitrary code via a crafted...

PT-2018-18370

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.5 Description: A heap-based buffer overflow issue exists in the GetNextToken function of PoDoFo::PdfTokenizer in PdfTokenizer.cpp. This could allow remote attackers to cause a denial-of-service or potentially execute...

CVE-2017-5886: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...