rpm package
opensuse/podofo-0_10&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/podofo-0_10&distro=openSUSE%20Tumbleweed
Vulnerabilities (33)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2017-7381 | Med | 5.5 | < 0.10.5-1.1 | 0.10.5-1.1 | Apr 3, 2017 | The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document. | |
| CVE-2017-7380 | Med | 5.5 | < 0.10.5-1.1 | 0.10.5-1.1 | Apr 3, 2017 | The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document. | |
| CVE-2017-7379 | Med | 5.5 | < 0.10.5-1.1 | 0.10.5-1.1 | Apr 3, 2017 | The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PDF document. | |
| CVE-2017-7378 | Med | 5.5 | < 0.10.5-1.1 | 0.10.5-1.1 | Apr 3, 2017 | The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PDF document. | |
| CVE-2017-6847 | Med | 5.5 | < 0.10.5-1.1 | 0.10.5-1.1 | Mar 15, 2017 | The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. | |
| CVE-2017-6845 | Med | 5.5 | < 0.10.5-1.1 | 0.10.5-1.1 | Mar 15, 2017 | The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. | |
| CVE-2017-6844 | Hig | 7.8 | < 0.10.5-1.1 | 0.10.5-1.1 | Mar 15, 2017 | Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file. | |
| CVE-2017-6840 | Med | 5.5 | < 0.10.5-1.1 | 0.10.5-1.1 | Mar 15, 2017 | The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (invalid read) via a crafted file. | |
| CVE-2017-5886 | Hig | 7.8 | < 0.10.5-1.1 | 0.10.5-1.1 | Mar 1, 2017 | Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file. | |
| CVE-2017-5855 | Med | 5.5 | < 0.10.5-1.1 | 0.10.5-1.1 | Mar 1, 2017 | The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. | |
| CVE-2017-5854 | Med | 5.5 | < 0.10.5-1.1 | 0.10.5-1.1 | Mar 1, 2017 | base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file. | |
| CVE-2017-5853 | Hig | 7.8 | < 0.10.5-1.1 | 0.10.5-1.1 | Mar 1, 2017 | Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file. | |
| CVE-2017-5852 | Med | 5.5 | < 0.10.5-1.1 | 0.10.5-1.1 | Mar 1, 2017 | The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted file. |
- affected < 0.10.5-1.1fixed 0.10.5-1.1
The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
- affected < 0.10.5-1.1fixed 0.10.5-1.1
The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
- affected < 0.10.5-1.1fixed 0.10.5-1.1
The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PDF document.
- affected < 0.10.5-1.1fixed 0.10.5-1.1
The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PDF document.
- affected < 0.10.5-1.1fixed 0.10.5-1.1
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
- affected < 0.10.5-1.1fixed 0.10.5-1.1
The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
- affected < 0.10.5-1.1fixed 0.10.5-1.1
Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
- affected < 0.10.5-1.1fixed 0.10.5-1.1
The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (invalid read) via a crafted file.
- affected < 0.10.5-1.1fixed 0.10.5-1.1
Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
- affected < 0.10.5-1.1fixed 0.10.5-1.1
The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
- affected < 0.10.5-1.1fixed 0.10.5-1.1
base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.
- affected < 0.10.5-1.1fixed 0.10.5-1.1
Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
- affected < 0.10.5-1.1fixed 0.10.5-1.1
The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted file.
Page 2 of 2