Podofo@0.9.5 Security Vulnerabilities and Issues — Podofo@0.9.5 CVE List

Lucene search

Podofo ProjectPodofo0.9.5

27 matches found

CVE•added 2017/05/01 1:59 a.m.•263 views

CVE-2017-8378

Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors related to m_offsets.size.

9.8CVSS9.7AI score0.0035EPSS

CVE•added 2017/04/22 10:59 p.m.•150 views

CVE-2017-8054

The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted PDF document.

5.5CVSS6.4AI score0.00402EPSS

CVE•added 2017/04/03 5:59 a.m.•143 views

CVE-2017-7380

The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.

5.5CVSS6.6AI score0.00239EPSS

CVE•added 2017/05/05 7:29 a.m.•143 views

CVE-2017-8787

The PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base/PdfXRefStreamParserObject.cpp:224 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted PDF file.

8.8CVSS9.3AI score0.0045EPSS

CVE•added 2018/01/09 5:29 a.m.•143 views

CVE-2018-5309

In PoDoFo 0.9.5, there is an integer overflow in the PdfObjectStreamParserObject::ReadObjectsFromStream function (base/PdfObjectStreamParserObject.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file.

5.5CVSS6.2AI score0.00232EPSS

CVE•added 2018/03/09 7:29 p.m.•143 views

CVE-2018-8001

In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName() in PdfName.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.

7.8CVSS8.2AI score0.0019EPSS

CVE•added 2017/04/21 4:59 p.m.•142 views

CVE-2017-7994

The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.

6.5CVSS7.2AI score0.00645EPSS

CVE•added 2017/04/03 5:59 a.m.•141 views

CVE-2017-7378

The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PDF document.

5.5CVSS6.6AI score0.00239EPSS

CVE•added 2018/01/08 7:29 a.m.•139 views

CVE-2018-5295

In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function (base/PdfXRefStreamParserObject.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file.

5.5CVSS6.9AI score0.00374EPSS

CVE•added 2017/04/03 5:59 a.m.•136 views

CVE-2017-7379

The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PDF document.

5.5CVSS6.7AI score0.00239EPSS

CVE•added 2018/01/08 7:29 a.m.•135 views

CVE-2018-5296

In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PdfParser::ReadXRefSubsection function (base/PdfParser.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file.

5.5CVSS6.3AI score0.00374EPSS

CVE•added 2018/01/09 5:29 a.m.•129 views

CVE-2018-5308

PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function (base/PdfOutputStream.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.

7.8CVSS8.5AI score0.00206EPSS

CVE•added 2017/03/15 2:59 p.m.•121 views

CVE-2017-6840

The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (invalid read) via a crafted file.

5.5CVSS6.6AI score0.00106EPSS

CVE•added 2018/03/09 7:29 p.m.•84 views

CVE-2018-8002

In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

8.8CVSS8.6AI score0.02048EPSS

CVE•added 2017/04/03 5:59 a.m.•80 views

CVE-2017-7382

The PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.

5.5CVSS6.8AI score0.00413EPSS

CVE•added 2017/04/03 5:59 a.m.•78 views

CVE-2017-7381

The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.

5.5CVSS6.8AI score0.00413EPSS

CVE•added 2018/05/18 7:29 p.m.•78 views

CVE-2018-11254

An issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree::GetPageNode() function of PdfPagesTree.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file, a related issue to CVE-2017-8054.

5.5CVSS6.3AI score0.00402EPSS

CVE•added 2018/05/18 7:29 p.m.•76 views

CVE-2018-11255

An issue was discovered in PoDoFo 0.9.5. The function PdfPage::GetPageNumber() in PdfPage.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.

5.5CVSS6.2AI score0.00232EPSS

CVE•added 2018/05/18 7:29 p.m.•76 views

CVE-2018-11256

An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append() in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.

6.5CVSS6.7AI score0.00565EPSS

CVE•added 2018/01/19 8:29 a.m.•76 views

CVE-2018-5783

In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function (base/PdfVecObjects.h). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file.

5.5CVSS6.2AI score0.00374EPSS

CVE•added 2017/04/03 5:59 a.m.•73 views

CVE-2017-7383

The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.

5.5CVSS6.8AI score0.00413EPSS

CVE•added 2017/04/22 9:59 p.m.•72 views

CVE-2017-8053

PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp).

5.5CVSS6AI score0.00349EPSS

CVE•added 2018/03/09 7:29 p.m.•72 views

CVE-2018-8000

In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken() in PdfTokenizer.cpp, a related issue to CVE-2017-5886. Remote attackers could leverage this vulnerability to cause a denial-of-service or potentially execute arbitrary code via a crafted...

8.8CVSS8.8AI score0.03509EPSS

CVE•added 2017/03/15 2:59 p.m.•69 views

CVE-2017-6848

The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

5.5CVSS6.6AI score0.00402EPSS

CVE•added 2018/01/27 3:29 p.m.•69 views

CVE-2018-6352

In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file.

5.5CVSS5.3AI score0.00374EPSS

CVE•added 2017/03/15 2:59 p.m.•47 views

CVE-2017-6841

The GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

5.5CVSS5.3AI score0.00101EPSS

CVE•added 2017/03/15 2:59 p.m.•46 views

CVE-2017-6842

The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

5.5CVSS6.6AI score0.00101EPSS