Lucene search
+L

1023 matches found

Cvelist
Cvelist
added 2017/03/15 2:0 p.m.27 views

CVE-2017-6849

The PoDoFo::PdfColorGray::PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

5.3AI score0.01283EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2017/03/15 2:0 p.m.93 views

CVE-2017-6844

Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

7.8CVSS8.8AI score0.01523EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2017/03/15 2:0 p.m.35 views

CVE-2017-6846

The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

5.5CVSS5.4AI score0.01266EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2017/03/15 2:0 p.m.135 views

CVE-2017-6847

The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

5.5CVSS6.5AI score0.0126EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2017/03/15 2:0 p.m.96 views

CVE-2017-6848

The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

5.5CVSS6.9AI score0.01259EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2017/03/15 2:0 p.m.127 views

CVE-2017-6845

The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

5.5CVSS6.7AI score0.01288EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2017/03/15 2:0 p.m.61 views

CVE-2017-6849

The PoDoFo::PdfColorGray::PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

5.5CVSS5.4AI score0.01283EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2017/03/15 2:0 p.m.93 views

CVE-2017-6843

Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

7.8CVSS8.9AI score0.0153EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2017/03/15 12:0 a.m.4 views

PT-2017-17369 · Podofo +2 · Podofo +2

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.5 Description: The issue allows remote attackers to cause a denial of service via a crafted file, specifically through a NULL pointer dereference in the ColorChanger::GetColorFromStack function in colorchanger.cpp...

9.8CVSS6.8AI score0.08162EPSS
SaveExploits18References100
Positive Technologies
Positive Technologies
added 2017/03/15 12:0 a.m.5 views

PT-2017-17368 · Podofo +2 · Podofo +2

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.5 Description: The issue concerns a denial of service caused by a NULL pointer dereference in the GraphicsStack::TGraphicsStackElement::TGraphicsStackElement function, located in graphicsstack.h. This can be triggered by...

9.8CVSS6.8AI score0.08162EPSS
SaveExploits18References100
Positive Technologies
Positive Technologies
added 2017/03/15 12:0 a.m.1 views

PT-2017-17372 · Podofo +2 · Podofo +2

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.4 Description: The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, via a crafted file. This is due to a problem in the PoDoFo::PdfColor::operator function in PdfColor.cpp...

9.8CVSS7AI score0.02618EPSS
SaveExploits13References151
Positive Technologies
Positive Technologies
added 2017/03/15 12:0 a.m.7 views

PT-2017-17367 · Podofo +2 · Podofo +2

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.5 Description: The issue allows remote attackers to cause a denial of service via a crafted file. This is due to an invalid read in the ColorChanger::GetColorFromStack function in colorchanger.cpp. Recommendations: For PoDo...

9.8CVSS6.8AI score0.08162EPSS
SaveExploits20References173
Positive Technologies
Positive Technologies
added 2017/03/15 12:0 a.m.1 views

PT-2017-17376 · Podofo +2 · Podofo +2

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.4 Description: The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, via a crafted file. This is related to the PoDoFo::PdfColorGray::PdfColorGray function in PdfColor.cpp...

9.8CVSS6.9AI score0.02618EPSS
SaveExploits4References72
CNVD
CNVD
added 2017/03/03 12:0 a.m.4 views

PoDoFo Denial of Service Vulnerability (CNVD-2017-02738)

PoDoFo is an open source , written in C++ using the PDF file format library . PoDoFo 0.9.4 version of the PdfParser.cpp file in the 'PoDoFo::PdfParser::ReadXRefSubsection' function has a security vulnerability. A remote attacker can exploit the vulnerability to cause a denial of service null...

5.5CVSS5.7AI score0.01023EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/03/03 12:0 a.m.6 views

PoDoFo Heap Buffer Overflow Vulnerability

PoDoFo is an open source , written in C++ using the PDF file format library . PoDoFo 0.9.4 version of the PdfTokenizer.cpp file in the 'PoDoFo::PdfTokenizer::GetNextToken' function has a heap buffer overflow vulnerability. A remote attacker can exploit the vulnerability with a specially crafted...

7.8CVSS8.3AI score0.01688EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/03/03 12:0 a.m.5 views

PoDoFo denial of service vulnerability

PoDoFo is an open source , written in C++ using the PDF file format library . PoDoFo 0.9.4 version of the base/PdfVariant.cpp file in the 'PoDoFo::PdfPage::GetInheritedKeyFromObject' function has a security vulnerability. The vulnerability can be exploited by a remote attacker to cause a denial o...

5.5CVSS5.7AI score0.01389EPSS
SaveExploits0References1
NVD
NVD
added 2017/03/01 3:59 p.m.15 views

CVE-2017-5886

Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

7.8CVSS8.4AI score0.01688EPSS
SaveExploits0References2
OSV
OSV
added 2017/03/01 3:59 p.m.25 views

CVE-2017-5886

Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

7.8CVSS7.4AI score
SaveExploits0References2
OSV
OSV
added 2017/03/01 3:59 p.m.13 views

CVE-2017-5855

The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

5.5CVSS6.5AI score
SaveExploits0References2
NVD
NVD
added 2017/03/01 3:59 p.m.11 views

CVE-2017-5854

base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...

5.5CVSS5.2AI score0.01491EPSS
SaveExploits0References4
Rows per page
Query Builder