Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40483
HistoryMay 12, 2023 - 2:55 a.m.

Denial Of Services (DoS)

2023-05-1202:55:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
vulnerable
segmentation fault
createfromobject
pdfencrypt.cpp
sigsegv
pdf file
application crash

0.001 Low

EPSS

Percentile

33.5%

libpodofo.so is vulnerable to Denial Of Services (DoS). The vulnerability exists due to the segmentation fault in the CreateFromObject function of PdfEncrypt.cpp, which allows an attacker to cause an application crash through the SIGSEGV error by providing a maliciously crafted pdf file.

CPENameOperatorVersion
libpodofo.sole0.9.8
libpodofo.sole0.9.8

0.001 Low

EPSS

Percentile

33.5%