PT-2017-17375

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.5 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, via a crafted file. This is due to a problem in the PoDoFo::PdfXObject::PdfXObject function in...

PT-2017-17368 · Podofo +2 · Podofo +2

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.5 Description: The issue concerns a denial of service caused by a NULL pointer dereference in the GraphicsStack::TGraphicsStackElement::TGraphicsStackElement function, located in graphicsstack.h. This can be triggered by...

CVE-2017-6842: NULL Pointer Dereference

The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

PT-2017-17376 · Podofo +2 · Podofo +2

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.4 Description: The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, via a crafted file. This is related to the PoDoFo::PdfColorGray::PdfColorGray function in PdfColor.cpp...

CVE-2017-6848: NULL Pointer Dereference

The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6846: NULL Pointer Dereference

The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6845: NULL Pointer Dereference

The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6849: NULL Pointer Dereference

The PoDoFo::PdfColorGray::PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6844: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-6840: Out-of-bounds Read

The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service invalid read via a crafted file...

PT-2017-17374

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.4 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, by providing a crafted file. This is related to the PoDoFo::PdfVariant::DelayedLoad function in...

CVE-2017-6841: NULL Pointer Dereference

The GraphicsStack::TGraphicsStackElement::TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6843: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

PoDoFo denial of service vulnerability

PoDoFo is an open source , written in C++ using the PDF file format library . PoDoFo 0.9.4 version of the base/PdfVariant.cpp file in the 'PoDoFo::PdfPage::GetInheritedKeyFromObject' function has a security vulnerability. The vulnerability can be exploited by a remote attacker to cause a denial o...

PoDoFo Denial of Service Vulnerability (CNVD-2017-02738)

PoDoFo is an open source , written in C++ using the PDF file format library . PoDoFo 0.9.4 version of the PdfParser.cpp file in the 'PoDoFo::PdfParser::ReadXRefSubsection' function has a security vulnerability. A remote attacker can exploit the vulnerability to cause a denial of service null...

PoDoFo Heap Buffer Overflow Vulnerability

PoDoFo is an open source , written in C++ using the PDF file format library . PoDoFo 0.9.4 version of the PdfTokenizer.cpp file in the 'PoDoFo::PdfTokenizer::GetNextToken' function has a heap buffer overflow vulnerability. A remote attacker can exploit the vulnerability with a specially crafted...

CVE-2017-5854

base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...

CVE-2017-5855

The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-5886

Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-5854

base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...