4 matches found
Null pointer dereference
The GraphicsStack::TGraphicsStackElement::TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...
CVE-2017-6846
The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...
CVE-2017-6841
The GraphicsStack::TGraphicsStackElement::TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...
CVE-2017-6846
The CVE-2017-6846 entry concerns PoDoFo 0.9.4: the GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function may dereference a NULL pointer via a crafted file, leading to denial of service. The vulnerability is triggered by processing malicious PDFs and results in a crash/DOs withou...