Null pointer dereference

The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

CVE-2017-7382

The PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

UBUNTU-CVE-2017-7379

The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PDF document...

UBUNTU-CVE-2017-7378

The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PDF document...

UBUNTU-CVE-2017-7382

The PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

UBUNTU-CVE-2017-7381

The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

UBUNTU-CVE-2017-7380

The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

CVE-2017-7380

The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

CVE-2017-7383

The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

CVE-2017-7379

The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PDF document...

CVE-2017-7379

CVE-2017-7379 affects PoDoFo 0.9.5’s PdfSimpleEncoding::ConvertToEncoding in PdfEncoding.cpp, permitting a crafted PDF to trigger a heap-based buffer over-read and application crash (denial of service). Connected advisories confirm the issue and list the patch status for Linux distros (e.g., open...

CVE-2017-7382

CVE-2017-7382 is tied to PoDoFo 0.9.5, where PdfFontFactory.cpp:200:88 contains a NULL pointer dereference that can crash the application via a crafted PDF document (DoS). The Connected documents confirm PoDoFo context and affected version, but do not provide a concrete remediation version or pat...

CVE-2017-7378

The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PDF document...

CVE-2017-7381

CVE-2017-7381 affects PoDoFo 0.9.5 where the PdfPage.cpp:609:23 code path allows a crafted PDF to trigger a NULL pointer dereference, leading to a denial of service. Public references in the provided connected docs confirm the flaw exists in PoDoFo and that multiple advisories (e.g., SUSE SU-2019...

CVE-2017-7383

CVE-2017-7383 affects PoDoFo 0.9.5. The vulnerability is a NULL pointer dereference in PdfFontFactory.cpp:195:62 that can be triggered by a crafted PDF, causing a denial of service. The provided documents do not specify affected platforms beyond PoDoFo 0.9.5, nor any patch/version that fixes it. ...

CVE-2017-7380

PoDoFo 0.9.5 is affected by CVE-2017-7380 through a NULL pointer dereference in PdfPage.cpp:614:20, which can lead to a denial of service via a crafted PDF document (application crash). Exploitation or in-the-wild details are not provided in the documents. Remediation is through vendor updates: S...

CVE-2017-7378

CVE-2017-7378 affects PoDoFo 0.9.5, where PoDoFo::PdfPainter::ExpandTabs can be triggered by a crafted PDF to cause a heap-based buffer over-read and application crash (denial of service). OpenSUSE/SUSE advisories indicate this issue was addressed in PoDoFo 0.9.6 and list CVE-2017-7378 among fixe...

CVE-2017-7381

The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

CVE-2017-7379

The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PDF document...

CVE-2017-7383

The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...