8 matches found
DEBIAN-CVE-2018-14320
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
Memory corruption
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
UBUNTU-CVE-2018-14320
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2018-14320
PoDoFo 0.9.6 is vulnerable to CVE-2018-14320 through PdfEncoding::ParseToUnicode due to improper validation, enabling memory corruption that can lead to arbitrary code execution (with user interaction required). The issue can also cause information disclosure and denial depending on exploitation ...
CVE-2018-14320
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
(0Day) PoDoFo Library ParseToUnicode Memory Corruption Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo Library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
PoDoFo Denial of Service Vulnerability (CNVD-2017-04557)
PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability in the PoDoFo :: PdfSimpleEncoding :: ConvertToEncoding function in PoDoFo version 0.9.5's PdfEncoding.cpp allows remote attackers to cause a denial of service heap buffer overflow and...
UBUNTU-CVE-2017-7379
The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PDF document...