CVE-2017-5886

Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

DEBIAN-CVE-2017-5852

The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service infinite loop via a crafted file...

UBUNTU-CVE-2017-5886

Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

UBUNTU-CVE-2017-5854

base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...

CVE-2017-5853

CVE-2017-5853 affects the PoDoFo library (PoDoFo 0.9.4) due to a signed/integer overflow in base/PdfParser.cpp, which could allow a remote attacker to impact the host via a crafted PDF file. Public advisories tied to this CVE (e.g., openSUSE/SUSE SU-2018:2481-1 and related Fedora advisories) indi...

CVE-2017-5852

The CVE-2017-5852 entry concerns PoDoFo 0.9.4: PoDoFo::PdfPage::GetInheritedKeyFromObject in base/PdfVariant.cpp can cause a denial of service via crafted PDFs (infinite loop). Public advisories confirm patches in newer PoDoFo releases (e.g., openSUSE/SUSE updates shipping PoDoFo 0.9.6) to addres...

CVE-2017-5886

Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-5854

CVE-2017-5854 affects PoDoFo 0.9.4, where base/PdfOutputStream.cpp is vulnerable to a crafted PDF causing a NULL pointer dereference and denial of service. Public advisories (SUSE-SU-2018:2481-1 and OpenSUSE/OpenSUSE-2019-66) document the fix by upgrading PoDoFo and addressing the NULL dereferenc...

CVE-2017-5855

PoDoFo 0.9.4 contains a NULL pointer dereference in PoDoFo::PdfParser::ReadXRefSubsection when processing a crafted PDF, enabling denial of service. OpenSUSE/SUSE advisories fix this by upgrading to a newer PoDoFo (e.g., 0.9.6) or applying patches that address CVE-2017-5855. No exploit details or...

CVE-2017-5855

The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-5854

base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...

CVE-2017-5852

The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service infinite loop via a crafted file...

CVE-2017-5853

Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-5886

CVE-2017-5886 is a PoDoFo heap-based buffer overflow in PoDoFo::PdfTokenizer::GetNextToken (PdfTokenizer.cpp) affecting PoDoFo 0.9.4. The vulnerability allows a crafted PDF file to cause a denial of service or related impact; exploitation details are not provided in the initial document. Connecte...

CVE-2017-5855

The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-5854

base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...

CVE-2017-5852

The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service infinite loop via a crafted file...

CVE-2017-5853

Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-5886

Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

PT-2017-16737 · Podofo +4 · Podofo +4

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.4 Description: A heap-based buffer overflow issue exists in the PoDoFo::PdfTokenizer::GetNextToken function, located in PdfTokenizer.cpp. This issue can be triggered by remote attackers using a crafted file, potentially...