PoDoFo Denial of Service Vulnerability (CNVD-2017-04557)

PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability in the PoDoFo :: PdfSimpleEncoding :: ConvertToEncoding function in PoDoFo version 0.9.5's PdfEncoding.cpp allows remote attackers to cause a denial of service heap buffer overflow and...

CVE-2017-7379

The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PDF document...

DEBIAN-CVE-2017-7379

The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PDF document...

CVE-2017-7379

The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PDF document...

UBUNTU-CVE-2017-7379

The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PDF document...

CVE-2017-7379

CVE-2017-7379 affects PoDoFo 0.9.5’s PdfSimpleEncoding::ConvertToEncoding in PdfEncoding.cpp, permitting a crafted PDF to trigger a heap-based buffer over-read and application crash (denial of service). Connected advisories confirm the issue and list the patch status for Linux distros (e.g., open...