Lucene search
K

8 matches found

OSV
OSV
added 2018/09/17 6:29 p.m.1 views

DEBIAN-CVE-2018-14320

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS6.3AI score0.00498EPSS
Exploits0References1
Prion
Prion
added 2018/09/17 6:29 p.m.19 views

Memory corruption

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

4.3CVSS6.6AI score0.00498EPSS
Exploits0References1
OSV
OSV
added 2018/09/17 6:29 p.m.1 views

UBUNTU-CVE-2018-14320

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS5.9AI score0.00498EPSS
Exploits0References3
CVE
CVE
added 2018/09/17 6:0 p.m.66 views

CVE-2018-14320

PoDoFo 0.9.6 is vulnerable to CVE-2018-14320 through PdfEncoding::ParseToUnicode due to improper validation, enabling memory corruption that can lead to arbitrary code execution (with user interaction required). The issue can also cause information disclosure and denial depending on exploitation ...

6.5CVSS7.3AI score0.00498EPSS
Exploits0References1Affected Software1
Debian CVE
Debian CVE
added 2018/09/17 6:0 p.m.21 views

CVE-2018-14320

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS7.5AI score0.00498EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2018/09/13 12:0 a.m.27 views

(0Day) PoDoFo Library ParseToUnicode Memory Corruption Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo Library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

4.3CVSS3.6AI score0.00498EPSS
Exploits0
CNVD
CNVD
added 2017/04/05 12:0 a.m.1 views

PoDoFo Denial of Service Vulnerability (CNVD-2017-04557)

PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability in the PoDoFo :: PdfSimpleEncoding :: ConvertToEncoding function in PoDoFo version 0.9.5's PdfEncoding.cpp allows remote attackers to cause a denial of service heap buffer overflow and...

5.5CVSS5.8AI score0.00432EPSS
Exploits0References1
OSV
OSV
added 2017/04/03 5:59 a.m.0 views

UBUNTU-CVE-2017-7379

The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PDF document...

5.5CVSS7.5AI score0.00432EPSS
Exploits0References4
Rows per page
Query Builder