CVE-2018-11256

An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

CVE-2018-11255

An issue was discovered in PoDoFo 0.9.5. The function PdfPage::GetPageNumber in PdfPage.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

CVE-2018-11254

PoDoFo vulnerability set in PoDoFo 0.9.5–0.9.6 enabling denial of service through crafted PDFs, stemming from multiple issues. The primary CVE in this cluster is CVE-2017-8054 (GetPageNodeFromArray/recursive DoS) and CVE-2018-11254 (Excessive Recursion in PdfPagesTree::GetPageNode). Other CVEs (2...

CVE-2018-11255

CVE-2018-11255 affects PoDoFo library (notably PoDoFo 0.9.5/0.9.6). The issue is a NULL pointer dereference in PdfPage::GetPageNumber() triggered by a crafted PDF, leading to a denial of service (crash). Vendor advisories and Nessus/SUSE entries confirm fixed in PoDoFo 0.9.7+. Remediation: upgrad...

CVE-2018-11256

An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

CVE-2018-11256

PoDoFo 0.9.6 (and earlier 0.9.5) is affected by CVE-2018-11256: PdfDocument::Append() can be exploited by a crafted PDF to trigger a NULL pointer dereference, crashing the application and causing a denial of service. Multiple connected sources confirm the issue in PoDoFo 0.9.5/0.9.6 and state the...

CVE-2018-11254

An issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree::GetPageNode function of PdfPagesTree.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file, a related issue to CVE-2017-8054...

CVE-2018-11255

An issue was discovered in PoDoFo 0.9.5. The function PdfPage::GetPageNumber in PdfPage.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

CVE-2018-11256

An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

CVE-2018-11254

An issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree::GetPageNode function of PdfPagesTree.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file, a related issue to CVE-2017-8054...

CVE-2018-11255

An issue was discovered in PoDoFo 0.9.5. The function PdfPage::GetPageNumber in PdfPage.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

CVE-2018-11256

An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

CVE-2018-11254

An issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree::GetPageNode function of PdfPagesTree.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file, a related issue to CVE-2017-8054...

PT-2018-10427 · Podofo +4 · Podofo +4

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.5 Description: An issue in the function PdfPage::GetPageNumber in PdfPage.cpp allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted PDF document...

PoDoFo 'PdfParserObject::ParseFileComplete()' function infinite loop vulnerability

PoDoFo is an open source , written in C++ using the PDF file format library . A security vulnerability exists in the 'PdfParserObject::ParseFileComplete' function in the PdfParserObject.cpp file in PoDoFo version 0.9.5. A remote attacker can exploit this vulnerability to cause a denial of service...

PoDoFo 'UnescapeName()' function heap buffer out-of-bounds read vulnerability

PoDoFo is an open source , written in C++ using the PDF file format library . A heap buffer out-of-bounds read vulnerability exists in the 'UnescapeName' function of the PdfName.cpp file in PoDoFo version 0.9.5. A remote attacker can exploit this vulnerability with the help of a specially crafted...

CVE-2018-8001

In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName in PdfName.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

CVE-2018-8000

In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken in PdfTokenizer.cpp, a related issue to CVE-2017-5886. Remote attackers could leverage this vulnerability to cause a denial-of-service or potentially execute arbitrary code via a crafted...

DEBIAN-CVE-2018-8002

In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

CVE-2018-8002

In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...