1023 matches found
SUSE-SU-2024:2281-1 Security update for podofo
This update for podofo fixes the following issues: - PdfEncrypt: Validate more encrypt dictionary parameters bsc1213720 - PdfXRefStreamParserObject: Fixed handling of invalid XRef stream entries bsc1213720...
PT-2024-40996 · Podofo · Podofo
Name of the Vulnerable Software and Affected Versions: podofo affected versions not specified Description: The issue concerns the validation of encrypt dictionary parameters in PdfEncrypt and the handling of invalid XRef stream entries in PdfXRefStreamParserObject. Recommendations: At the moment,...
openSUSE Security Advisory (SUSE-SU-2024:2137-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15 / openSUSE 15 Security Update : podofo (SUSE-SU-2024:2137-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2137-1 advisory. - CVE-2019-9199: Fixed a NULL pointer dereference in podofoimpose bsc1127855 - CVE-2018-20797: Fixed an excessive memory allocati...
SUSE-SU-2024:2137-1 Security update for podofo
This update for podofo fixes the following issues: - CVE-2019-9199: Fixed a NULL pointer dereference in podofoimpose bsc1127855 - CVE-2018-20797: Fixed an excessive memory allocation in PoDoFo:podofocalloc bsc1127514 - CVE-2019-10723: Fixed a memory leak in PdfPagesTreeCache bsc1131544...
PoDoFo: Multiple Vulnerabilities
Background PoDoFo is a free portable C++ library to work with the PDF file format. Description Please review the referenced CVE identifiers for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround at this time. Resolution All PoDoFo use...
GLSA-202405-33 : PoDoFo: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202405-33 PoDoFo: Multiple Vulnerabilities - Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted. CVE-2023-31566 - Podofo v0.10.0 was discovered to contain a hea...
PoDoFo Resource Management Error Vulnerability
PoDoFo is a free portable C++ library open-sourced by PoDoFo. A resource management error vulnerability exists in PoDoFo version 0.10.0, which stems from the function PoDoFo::PdfEncrypt::IsMetadataEncrypted containing heap reuse after release. A remote attacker can exploit this vulnerability to...
PoDoFo buffer overflow vulnerability (CNVD-2023-39432)
PoDoFo is a free portable C++ library open-sourced by PoDoFo. PoDoFo version 0.10.0 suffers from a buffer overflow vulnerability that originates from the function PoDoFo::PdfEncryptRC4::PdfEncryptRC4 contains a heap buffer overflow. An attacker can exploit the vulnerability to run arbitrary code ...
PoDoFo Buffer Overflow Vulnerability (CNVD-2023-39431)
PoDoFo is a free portable C++ library open-sourced by PoDoFo. PoDoFo version 0.10.0 suffers from a buffer overflow vulnerability that originates from the function PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3 contains a heap buffer overflow. A remote attacker could exploit this vulnerability to execut...
Stack-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow due to a segmentation violation in the findKeyParent function in PdfDictionary.cpp. Remediation Upgrade podofo to version 0.10.4 or higher. References - GitHub Commit - GitHub Issue...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the PdfEncryptRC4 function in PdfEncrypt.cpp. Remediation Upgrade podofo to version 0.10.4 or higher. References - GitHub Commit - GitHub Issue...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free in the IsMetadataEncrypted function in PdfEncrypt. Remediation Upgrade podofo to version 0.10.4 or higher. References - GitHub Commit - GitHub Issue...
SUSE CVE-2023-31566
Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted...
SUSE CVE-2023-31567
Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3...
Buffer Overflow
Overview Affected versions of this package are vulnerable to Buffer Overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3. Remediation Upgrade podofo to version 0.10.4 or higher. References - GitHub Commit - GitHub Issue Credit: longuu9...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS via the function PoDoFo::PdfObject::DelayedLoad. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike other...
CVE-2023-31556
podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent...