CVE-2017-5886: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-5852: Loop with Unreachable Exit Condition

The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service infinite loop via a crafted file...

CVE-2017-5853: Integer Overflow or Wraparound

Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-5855: NULL Pointer Dereference

The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

PT-2017-16715

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.4 Description The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference, via a crafted file. Recommendations For PoDoFo version 0.9.4, at the moment, there is no...

PT-2017-16737

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.4 Description A heap-based buffer overflow issue exists in the PoDoFo::PdfTokenizer::GetNextToken function, located in PdfTokenizer.cpp. This issue can be triggered by remote attackers using a crafted file, potentially leadi...

PT-2017-16716

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.4 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, by providing a crafted file. This is related to the ReadXRefSubsection function in PdfParser.cpp...

PT-2017-16714

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.4 Description The issue is related to an integer overflow in the base/PdfParser.cpp file, which can be triggered by a remote attacker using a crafted file. This may have an unspecified impact on the system. Recommendations F...

PT-2017-16713

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.4 Description The issue allows remote attackers to cause a denial of service, specifically an infinite loop, by providing a crafted file. This is due to a problem in the PoDoFo::PdfPage::GetInheritedKeyFromObject function...

podofo integer overflow vulnerability

PoDoFo is an open source , written in C++ using the PDF file format library . An integer overflow vulnerability exists in PoDoFo version 0.9.4, which stems from the program's failure to adequately perform boundary checks on user-submitted data. An attacker could exploit this vulnerability to caus...

podofo 'PdfOutputStream.cpp' Null Pointer Reference Denial of Service Vulnerability

PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability exists in PoDoFo version 0.9.4. An attacker can exploit this vulnerability to cause a denial of service...