Buffer overflow

Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-6843

Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

UBUNTU-CVE-2017-6846

The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

UBUNTU-CVE-2017-6848

The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file. Remediation There is no fixed...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. The GraphicsStack::TGraphicsStackElement::TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

Null pointer dereference

The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

UBUNTU-CVE-2017-6840

The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service invalid read via a crafted file...

UBUNTU-CVE-2017-6845

The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

UBUNTU-CVE-2017-6847

The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

UBUNTU-CVE-2017-6843

Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

UBUNTU-CVE-2017-6844

Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-6842

CVE-2017-6842 affects PoDoFo 0.9.5: the ColorChanger::GetColorFromStack function in colorchanger.cpp exposes a NULL pointer dereference via a crafted file, causing denial of service. Public sources (OSV and OSV-linked advisories) confirm a fix was released (e.g., SUSE-SU-2024:3550-1) and indicate...

CVE-2017-6848

CVE-2017-6848 affects PoDoFo 0.9.5 where PoDoFo::PdfXObject::PdfXObject can be triggered by a crafted PDF file to cause a NULL pointer dereference leading to a denial of service. The description specifies a remote denial of service via crafted input. No explicit remediation or patched version is ...

CVE-2017-6841

CVE-2017-6841 affects PoDoFo 0.9.5: the GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement destructor can dereference a NULL pointer when processing crafted PDFs, leading to a denial of service. Public advisories (OSV entries for SUSE) document a fix as part of podofo updates (e.g., SUS...

CVE-2017-6840

The CVE-2017-6840 issue affects PoDoFo 0.9.5: ColorChanger::GetColorFromStack in colorchanger.cpp allows an invalid read leading to a denial of service when processing a crafted file. Connected advisories (SUSE/OpenSUSE) note a fix for this vulnerability in PoDoFo, indicating remediation via upda...

CVE-2017-6843

CVE-2017-6843 describes a heap-based buffer overflow in PoDoFo 0.9.4, specifically PoDoFo::PdfVariant::DelayedLoad in PdfVariant.h, exploitable by a crafted file. The initial description lists the impact as unspecified; no remediation or patch details are provided in the supplied documents.

CVE-2017-6846

The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6843

Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-6841

The GraphicsStack::TGraphicsStackElement::TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...