CVE-2017-6847

The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6849

CVE-2017-6849 affects PoDoFo 0.9.4, where PoDoFo::PdfColorGray::~PdfColorGray can cause a denial of service via a crafted PDF file due to a NULL pointer dereference. The vulnerability is confirmed in multiple OSV and security-advisory records tied to PoDoFo, including SUSE advisories that list CV...

CVE-2017-6845

CVE-2017-6845 affects PoDoFo 0.9.4: The PoDoFo::PdfColor::operator function in PdfColor.cpp allows a crafted PDF to trigger a NULL pointer dereference, causing denial of service. OpenSUSE/SUSE advisories document the flaw and list patched releases (e.g., PoDoFo 0.9.6) that fix NULL pointer derefe...

CVE-2017-6846

The CVE-2017-6846 entry concerns PoDoFo 0.9.4: the GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function may dereference a NULL pointer via a crafted file, leading to denial of service. The vulnerability is triggered by processing malicious PDFs and results in a crash/DOs withou...

CVE-2017-6845

The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6848

The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6842

The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6844

PoDoFo 0.9.4 contains a buffer overflow in PoDoFo::PdfParser::ReadXRefSubsection (PdfParser.cpp) that can be triggered by a crafted PDF to achieve unspecified impact. Multiple connected advisories indicate fixes were released (e.g., openSUSE/SUSE-SU-2018:2481-1 and Fedora openSUSE updates) to add...

CVE-2017-6844

Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-6847

CVE-2017-6847 affects the PoDoFo library (PoDoFo 0.9.4) and is caused by a NULL pointer dereference in the DelayedLoad function of PdfVariant.h when processing crafted PDFs. Publicly referenced advisories in connected documents confirm the issue is fixed in subsequent PoDoFo updates (e.g., openSU...

CVE-2017-6840

The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service invalid read via a crafted file...

CVE-2017-6843

Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-6840

The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service invalid read via a crafted file...

CVE-2017-6847

The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6845

The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6849

The PoDoFo::PdfColorGray::PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6841

The GraphicsStack::TGraphicsStackElement::TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6844

Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-6848

The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6842

The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...