Resource Management Errors

Overview Affected versions of this package are vulnerable to Resource Management Errors. PoDoFo 0.9.5 allows denial of service infinite recursion and stack consumption via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure PdfParser.cpp. Remediation There is no fixed version for podof...

CVE-2017-7994

The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

Null pointer dereference

The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

DEBIAN-CVE-2017-7994

The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

Adobe Acrobat and Reader Use After Free (APSB17-11: CVE-2017-3026)

A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...

Adobe Acrobat and Reader Information Disclosure (APSB17-11: CVE-2017-3021)

An information disclosure vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to out-of-bounds error while accessing unintended memory in a specially crafted PDF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted PDF...

PoDoFo Denial of Service Vulnerability (CNVD-2017-04559)

PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability exists in the PoDoFo :: PdfPainter :: ExpandTabs function in PdfPainter.cpp in PoDoFo version 0.9.5, where a remote attacker can cause a denial of service heap buffer overflow and...

PoDoFo Denial of Service Vulnerability (CNVD-2017-04561)

PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability in PdfFontFactory.cpp:200:88 code in PoDoFo version 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

PoDoFo Denial of Service Vulnerability (CNVD-2017-04557)

PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability in the PoDoFo :: PdfSimpleEncoding :: ConvertToEncoding function in PoDoFo version 0.9.5's PdfEncoding.cpp allows remote attackers to cause a denial of service heap buffer overflow and...

PoDoFo Denial of Service Vulnerability (CNVD-2017-04560)

PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability exists in the doc/PdfPage.cpp:609:23 code in PoDoFo version 0.9.5 that allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted...

CVE-2017-7379

The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PDF document...

CVE-2017-7381

The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

DEBIAN-CVE-2017-7383

The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

CVE-2017-7383

The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

DEBIAN-CVE-2017-7381

The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

CVE-2017-7379

The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PDF document...

CVE-2017-7382

The PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

CVE-2017-7382

The PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

CVE-2017-7383

The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

Null pointer dereference

The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...