Podofo@0.9.4 Security Vulnerabilities and Issues — Podofo@0.9.4 CVE List

Lucene search

Podofo ProjectPodofo0.9.4

11 matches found

CVE•added 2017/03/01 3:59 p.m.•152 views

CVE-2017-5886

Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.

7.8CVSS8.7AI score0.00321EPSS

CVE•added 2017/03/15 2:59 p.m.•152 views

CVE-2017-6844

Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.

7.8CVSS8.6AI score0.00557EPSS

CVE•added 2017/03/15 2:59 p.m.•146 views

CVE-2017-6845

The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

5.5CVSS6.6AI score0.00214EPSS

CVE•added 2017/03/15 2:59 p.m.•143 views

CVE-2017-6847

The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

5.5CVSS6.4AI score0.00402EPSS

CVE•added 2017/03/01 3:59 p.m.•121 views

CVE-2017-5854

base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.

5.5CVSS6.6AI score0.00127EPSS

CVE•added 2017/03/01 3:59 p.m.•119 views

CVE-2017-5852

The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted file.

5.5CVSS6.6AI score0.0024EPSS

CVE•added 2017/03/01 3:59 p.m.•118 views

CVE-2017-5855

The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

5.5CVSS6.6AI score0.0019EPSS

CVE•added 2017/03/01 3:59 p.m.•115 views

CVE-2017-5853

Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.

7.8CVSS8.6AI score0.0024EPSS

CVE•added 2017/03/15 2:59 p.m.•75 views

CVE-2017-6843

Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.

7.8CVSS8.7AI score0.00528EPSS

CVE•added 2017/03/15 2:59 p.m.•66 views

CVE-2017-6849

The PoDoFo::PdfColorGray::~PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

5.5CVSS5.3AI score0.00201EPSS

CVE•added 2017/03/15 2:59 p.m.•58 views

CVE-2017-6846

The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

5.5CVSS5.3AI score0.00402EPSS