PoDoFo Stack Buffer Overflow Vulnerability

PoDoFo is a free, portable and easy to use PDF parsing, modification and creation library. A stack buffer overflow vulnerability exists in the PdfEncrypt::ComputeOwnerKey function in PdfEncrypt.cpp in PoDoFo version 0.9.7. The vulnerability stems from improper checking of the keyLength value. No...

Unspecified vulnerability in PoDoFo (CNVD-2021-43538)

PoDoFo is a free, portable and easy to use PDF parsing, modification and creation library. An uncontrolled recursive call vulnerability exists in the PdfTokenizer::ReadArray, PdfTokenizer::GetNextVariant and PdfTokenizer::ReadDataType functions in PoDoFo version 0.9.7. An attacker could exploit...

PoDoFo Post-Release Reuse Vulnerability

PoDoFo is a free, portable and easy to use PDF parsing, modification and creation library. A post-release reuse vulnerability exists in the PoDoFo::PdfVecObjects::Clear function in PoDoFo version 0.9.7. An attacker can exploit this vulnerability to cause a denial of service via a specially crafte...

Sourceforge PoDoFo 缓冲区错误漏洞

PoDoFo is a free, portable and easy to use PDF parsing, modification and creation library. A stack buffer overflow vulnerability exists in the PdfEncrypt::ComputeOwnerKey function in PdfEncrypt.cpp in PoDoFo version 0.9.7. The vulnerability stems from improper checking of the keyLength value. No...

PT-2019-16091 · Podofo +3 · Podofo +3

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.6 Description: The issue allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file. This is due to the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h, which is affected by co...

PoDoFo Buffer Overflow Vulnerability (CNVD-2019-07248)

PoDoFo is an open source , written in C++ using the PDF file format library . PoDoFo 0.9.6 version of the base/PdfString.cpp file of the 'PdfString::ConvertUTF16toUTF8' function has a heap buffer overflow vulnerability that can be exploited by an attacker to execute code or cause a denial of...

CVE-2018-19532

A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by podofoimpose. It allows an attacker to cause Denial of Service...

DEBIAN-CVE-2018-14320

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

podofo denial of service vulnerability (CNVD-2018-18119)

PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability exists in the 'PoDoFo::PdfParser::ReadObjects' function in the base/PdfParser.cpp file in PoDoFo version 0.9.6. A remote attacker could exploit this vulnerability to cause a denial of...

PoDoFo 'UnescapeName()' function heap buffer out-of-bounds read vulnerability

PoDoFo is an open source , written in C++ using the PDF file format library . A heap buffer out-of-bounds read vulnerability exists in the 'UnescapeName' function of the PdfName.cpp file in PoDoFo version 0.9.5. A remote attacker can exploit this vulnerability with the help of a specially crafted...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a...

PoDoFo Denial of Service Vulnerability (CNVD-2018-03972)

PoDoFo is an open source , written in C++ using the PDF file format library . PoDoFo 0.9.5 version of the base/PdfObjectStreamParserObject.cpp file of the 'PdfObjectStreamParserObject::ReadObjectsFromStream' function has a security vulnerability. A remote attacker can exploit this vulnerability...

UBUNTU-CVE-2018-5308

PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function base/PdfOutputStream.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

CVE-2018-5308

PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function base/PdfOutputStream.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

PoDoFo Denial of Service Vulnerability (CNVD-2017-06111)

PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability exists in PoDoFo version 0.9.5. A remote attacker can exploit this vulnerability to deny service infinite recursion and stack consumption via a crafted PDF file...

PoDoFo Denial of Service Vulnerability (CNVD-2017-04559)

PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability exists in the PoDoFo :: PdfPainter :: ExpandTabs function in PdfPainter.cpp in PoDoFo version 0.9.5, where a remote attacker can cause a denial of service heap buffer overflow and...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PDF documen...

CVE-2015-8981

Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified impact via vectors related to moffsets.size...

UBUNTU-CVE-2017-6847

The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6841

CVE-2017-6841 affects PoDoFo 0.9.5: the GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement destructor can dereference a NULL pointer when processing crafted PDFs, leading to a denial of service. Public advisories (OSV entries for SUSE) document a fix as part of podofo updates (e.g., SUS...