Lucene search
K

15 matches found

NVD
NVD
added 2026/01/27 4:16 p.m.4 views

CVE-2025-11187

Issue summary: PBMAC1 parameters in PKCS12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. Impact summary: The stack buffer overflow or NULL pointer dereference may cause a crash leading to Denial o...

6.1CVSS0.00008EPSS
Exploits1References5
OSV
OSV
added 2026/01/27 12:0 a.m.1 views

UBUNTU-CVE-2025-11187

Issue summary: PBMAC1 parameters in PKCS12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. Impact summary: The stack buffer overflow or NULL pointer dereference may cause a crash leading to Denial o...

6.1CVSS7.9AI score0.00008EPSS
Exploits1References3
AstraLinux
AstraLinux
added 2026/01/13 2:1 p.m.0 views

Astra Linux - уязвимость в openssl

Issue summary: PBMAC1 parameters in PKCS12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. Impact summary: The stack buffer overflow or NULL pointer dereference may cause a crash leading to Denial o...

6.1CVSS7AI score0.00008EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-17395

Malware in sbrugna...

7.8CVSS7.7AI score0.00193EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-30472

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base::ComputeOwnerKey function in PdfEncrypt.cpp is possible because of a improp...

7.8CVSS7.4AI score0.00193EPSS
Exploits1References3
Prion
Prion
added 2021/05/26 10:15 p.m.8 views

Stack overflow

A flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base::ComputeOwnerKey function in PdfEncrypt.cpp is possible because of a improper check of the keyLength value...

6.8CVSS7.8AI score0.00193EPSS
Exploits1References1Affected Software1
Snyk
Snyk
added 2021/05/26 10:15 p.m.1 views

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. A flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base::ComputeOwnerKey function in PdfEncrypt.cpp is possible because of a improper check of the keyLength value. Remediation There is no fixe...

7.8CVSS7AI score0.00193EPSS
Exploits1References2
AlpineLinux
AlpineLinux
added 2021/05/26 10:15 p.m.18 views

CVE-2021-30472

A flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base::ComputeOwnerKey function in PdfEncrypt.cpp is possible because of a improper check of the keyLength value...

7.8CVSS3.9AI score0.00193EPSS
Exploits1
CVE
CVE
added 2021/05/26 9:38 p.m.60 views

CVE-2021-30472

CVE-2021-30472 affects PoDoFo 0.9.7. A stack-based buffer overflow is possible in PdfEncryptMD5Base::ComputeOwnerKey (PdfEncrypt.cpp) due to an improper check of the keyLength value. Documented across multiple feeds (NVD entry, CNVD/OSV entries, OSV Ubuntu/Debian, Alpine Linux, Nessus plugin) wit...

7.8CVSS7.7AI score0.00193EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2021/05/26 12:0 a.m.1 views

Sourceforge PoDoFo 缓冲区错误漏洞

PoDoFo is a free, portable and easy to use PDF parsing, modification and creation library. A stack buffer overflow vulnerability exists in the PdfEncrypt::ComputeOwnerKey function in PdfEncrypt.cpp in PoDoFo version 0.9.7. The vulnerability stems from improper checking of the keyLength value. No...

7.8CVSS5.9AI score0.00193EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2021/05/26 12:0 a.m.1 views

PT-2021-18746 · Podofo +2 · Podofo +2

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.7 Description: A flaw was found in the PdfEncryptMD5Base::ComputeOwnerKey function in PdfEncrypt.cpp, which allows for a stack-based buffer overflow due to an improper check of the keyLength value. Recommendations: For PoDo...

7.8CVSS5.8AI score0.00193EPSS
Exploits4References22
NVD
NVD
added 2005/05/02 4:0 a.m.15 views

CVE-2005-0064

Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value...

7.5CVSS7.6AI score0.08395EPSS
Exploits1References26
UbuntuCve
UbuntuCve
added 2005/05/02 4:0 a.m.31 views

CVE-2005-0064

Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value...

7.5CVSS6.4AI score0.08395EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2005/02/15 10:15 a.m.1 views

security flaw

Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value...

7.5CVSS6.3AI score0.08395EPSS
Exploits1References4
CVE
CVE
added 2005/01/19 5:0 a.m.72 views

CVE-2005-0064

CVE-2005-0064 is a buffer overflow in Xpdf’s Decrypt::makeFileKey2 (Decrypt.cc) that affected Xpdf 3.00 and earlier, enabling remote code execution via PDFs with a large /Encrypt /Length. Connected GLSA entries confirm Xpdf (and GPdf) include code sharing Xpdf, and note the issue could impact CUP...

7.5CVSS7.5AI score0.08395EPSS
Exploits1References26Affected Software1
Rows per page
Query Builder