[SECURITY] Fedora 32 Update: podofo-0.9.6-12.fc32

PoDoFo is a library to work with the PDF file format. The name comes from the first letter of PDF Portable Document Format. A few tools to work with PDF files are already included in the PoDoFo package. The PoDoFo library is a free, portable C++ library which includes classes to parse PDF files a...

Fedora: Security Advisory for mingw-podofo (FEDORA-2020-afa955de8a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 31 Update: mingw-podofo-0.9.6-16.fc31

MinGW Windows podofo library...

[SECURITY] Fedora 31 Update: mingw-podofo-0.9.6-15.fc31

MinGW Windows podofo library...

[SECURITY] Fedora 30 Update: podofo-0.9.6-9.fc30

PoDoFo is a library to work with the PDF file format. The name comes from the first letter of PDF Portable Document Format. A few tools to work with PDF files are already included in the PoDoFo package. The PoDoFo library is a free, portable C++ library which includes classes to parse PDF files a...

DEBIAN-CVE-2019-20093

The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file, because of ImageExtractor.cpp...

The vulnerability of the crop_page() function in the PoDoFo software library, which allows a hacker to trigger a service failure.

The vulnerability of the croppage function in the PoDoFo software library is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially crafted file...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. An issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class in doc/PdfPagesTreeCache.cpp has an attempted excessive memory allocation because nInitialSize is not validated. Details Denial of Service DoS...

DEBIAN-CVE-2019-9687

PoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF16toUTF8 in base/PdfString.cpp...

DEBIAN-CVE-2018-20797

An issue was discovered in PoDoFo 0.9.6. There is an attempted excessive memory allocation in PoDoFo::podofocalloc in base/PdfMemoryManagement.cpp when called from PoDoFo::PdfPredictorDecoder::PdfPredictorDecoder in base/PdfFiltersPrivate.cpp...

DEBIAN-CVE-2019-9199

PoDoFo::Impose::PdfTranslator::setSource in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can for example be triggered by sending a crafted PDF file to the podofoimpose binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified...

[SECURITY] Fedora 29 Update: mingw-podofo-0.9.6-7.fc29

MinGW Windows podofo library...

[SECURITY] Fedora 29 Update: mingw-podofo-0.9.6-5.fc29

MinGW Windows podofo library...

UBUNTU-CVE-2018-14320

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

(0Day) PoDoFo Library ParseToUnicode Memory Corruption Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo Library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

UBUNTU-CVE-2018-12982

Invalid memory read in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6-rc1 allows remote attackers to have denial-of-service impact via a crafted file...

PoDoFo Denial of Service Vulnerability (CNVD-2018-15746)

PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability exists in the 'PoDoFo::PdfVariant::DelayedLoad' function of the PdfVariant.h file in PoDoFo version 0.9.6-rc1. A remote attacker can exploit this vulnerability to cause a denial of...

PoDoFo Denial of Service Vulnerability (CNVD-2018-15745)

PoDoFo is an open source , written in C++ using the PDF file format library . PoDoFo 0.9.6-rc1 version of the PdfEncrypt.cpp file in the 'PdfEncryptMD5Base::ComputeEncryptionKey' function has a buffer overflow vulnerability. A remote attacker can exploit this vulnerability with a specially crafte...

UBUNTU-CVE-2018-6352

In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file...

PoDoFo Denial of Service Vulnerability (CNVD-2018-03969)

PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability exists in the 'PdfParser::ReadXRefSubsection' function in the base/PdfParser.cpp file in version 0.9.5 of PoDoFo, which stems from the program's failure to control memory allocation. A...