rpm package

opensuse/podofo&distro=openSUSE Tumbleweed

pkg:rpm/opensuse/podofo&distro=openSUSE%20Tumbleweed

Vulnerabilities (37)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2017-8054	Med	5.5	< 0.9.7-2.2	0.9.7-2.2	Apr 22, 2017	The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted PDF document.
CVE-2017-7994	Med	6.5	< 0.9.7-2.2	0.9.7-2.2	Apr 21, 2017	The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
CVE-2017-7383	Med	5.5	< 0.9.7-2.2	0.9.7-2.2	Apr 3, 2017	The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
CVE-2017-7382	Med	5.5	< 0.9.7-2.2	0.9.7-2.2	Apr 3, 2017	The PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
CVE-2017-7381	Med	5.5	< 0.9.7-2.2	0.9.7-2.2	Apr 3, 2017	The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
CVE-2017-7380	Med	5.5	< 0.9.7-2.2	0.9.7-2.2	Apr 3, 2017	The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
CVE-2017-7379	Med	5.5	< 0.9.7-2.2	0.9.7-2.2	Apr 3, 2017	The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PDF document.
CVE-2017-7378	Med	5.5	< 0.9.7-2.2	0.9.7-2.2	Apr 3, 2017	The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PDF document.
CVE-2017-6847	Med	5.5	< 0.9.7-2.2	0.9.7-2.2	Mar 15, 2017	The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-6845	Med	5.5	< 0.9.7-2.2	0.9.7-2.2	Mar 15, 2017	The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-6844	Hig	7.8	< 0.9.7-2.2	0.9.7-2.2	Mar 15, 2017	Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
CVE-2017-6840	Med	5.5	< 0.9.7-2.2	0.9.7-2.2	Mar 15, 2017	The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (invalid read) via a crafted file.
CVE-2017-5886	Hig	7.8	< 0.9.7-2.2	0.9.7-2.2	Mar 1, 2017	Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
CVE-2017-5855	Med	5.5	< 0.9.7-2.2	0.9.7-2.2	Mar 1, 2017	The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-5854	Med	5.5	< 0.9.7-2.2	0.9.7-2.2	Mar 1, 2017	base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.
CVE-2017-5853	Hig	7.8	< 0.9.7-2.2	0.9.7-2.2	Mar 1, 2017	Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
CVE-2017-5852	Med	5.5	< 0.9.7-2.2	0.9.7-2.2	Mar 1, 2017	The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted file.

CVE-2017-8054MedApr 22, 2017
affected < 0.9.7-2.2fixed 0.9.7-2.2
The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted PDF document.
CVE-2017-7994MedApr 21, 2017
affected < 0.9.7-2.2fixed 0.9.7-2.2
The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
CVE-2017-7383MedApr 3, 2017
affected < 0.9.7-2.2fixed 0.9.7-2.2
The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
CVE-2017-7382MedApr 3, 2017
affected < 0.9.7-2.2fixed 0.9.7-2.2
The PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
CVE-2017-7381MedApr 3, 2017
affected < 0.9.7-2.2fixed 0.9.7-2.2
The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
CVE-2017-7380MedApr 3, 2017
affected < 0.9.7-2.2fixed 0.9.7-2.2
The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
CVE-2017-7379MedApr 3, 2017
affected < 0.9.7-2.2fixed 0.9.7-2.2
The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PDF document.
CVE-2017-7378MedApr 3, 2017
affected < 0.9.7-2.2fixed 0.9.7-2.2
The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PDF document.
CVE-2017-6847MedMar 15, 2017
affected < 0.9.7-2.2fixed 0.9.7-2.2
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-6845MedMar 15, 2017
affected < 0.9.7-2.2fixed 0.9.7-2.2
The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-6844HigMar 15, 2017
affected < 0.9.7-2.2fixed 0.9.7-2.2
Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
CVE-2017-6840MedMar 15, 2017
affected < 0.9.7-2.2fixed 0.9.7-2.2
The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (invalid read) via a crafted file.
CVE-2017-5886HigMar 1, 2017
affected < 0.9.7-2.2fixed 0.9.7-2.2
Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
CVE-2017-5855MedMar 1, 2017
affected < 0.9.7-2.2fixed 0.9.7-2.2
The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-5854MedMar 1, 2017
affected < 0.9.7-2.2fixed 0.9.7-2.2
base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.
CVE-2017-5853HigMar 1, 2017
affected < 0.9.7-2.2fixed 0.9.7-2.2
Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
CVE-2017-5852MedMar 1, 2017
affected < 0.9.7-2.2fixed 0.9.7-2.2
The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted file.

Page 2 of 2