rpm package
suse/podofo&distro=SUSE Linux Enterprise Desktop 12 SP3
pkg:rpm/suse/podofo&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3
Vulnerabilities (25)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2018-11256 | Med | 6.5 | < 0.9.2-3.6.3 | 0.9.2-3.6.3 | May 18, 2018 | An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append() in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document. | |
| CVE-2018-8001 | Hig | 7.8 | < 0.9.2-3.3.1 | 0.9.2-3.3.1 | Mar 9, 2018 | In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName() in PdfName.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file. | |
| CVE-2018-5783 | Med | 5.5 | < 0.9.2-3.6.3 | 0.9.2-3.6.3 | Jan 19, 2018 | In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function (base/PdfVecObjects.h). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file. | |
| CVE-2018-5309 | Med | 5.5 | < 0.9.2-3.6.3 | 0.9.2-3.6.3 | Jan 9, 2018 | In PoDoFo 0.9.5, there is an integer overflow in the PdfObjectStreamParserObject::ReadObjectsFromStream function (base/PdfObjectStreamParserObject.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file. | |
| CVE-2018-5308 | Hig | 7.8 | < 0.9.2-3.3.1 | 0.9.2-3.3.1 | Jan 9, 2018 | PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function (base/PdfOutputStream.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file. | |
| CVE-2018-5296 | Med | 5.5 | < 0.9.2-3.6.3 | 0.9.2-3.6.3 | Jan 8, 2018 | In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PdfParser::ReadXRefSubsection function (base/PdfParser.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file. | |
| CVE-2018-5295 | Med | 5.5 | < 0.9.2-3.6.3 | 0.9.2-3.6.3 | Jan 8, 2018 | In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function (base/PdfXRefStreamParserObject.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file. | |
| CVE-2017-8787 | Hig | 8.8 | < 0.9.2-3.3.1 | 0.9.2-3.3.1 | May 5, 2017 | The PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base/PdfXRefStreamParserObject.cpp:224 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted PDF file. | |
| CVE-2017-8054 | Med | 5.5 | < 0.9.2-3.3.1 | 0.9.2-3.3.1 | Apr 22, 2017 | The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted PDF document. | |
| CVE-2017-7994 | Med | 6.5 | < 0.9.2-3.3.1 | 0.9.2-3.3.1 | Apr 21, 2017 | The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document. | |
| CVE-2017-7383 | Med | 5.5 | < 0.9.2-3.6.3 | 0.9.2-3.6.3 | Apr 3, 2017 | The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document. | |
| CVE-2017-7382 | Med | 5.5 | < 0.9.2-3.6.3 | 0.9.2-3.6.3 | Apr 3, 2017 | The PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document. | |
| CVE-2017-7381 | Med | 5.5 | < 0.9.2-3.6.3 | 0.9.2-3.6.3 | Apr 3, 2017 | The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document. | |
| CVE-2017-7380 | Med | 5.5 | < 0.9.2-3.3.1 | 0.9.2-3.3.1 | Apr 3, 2017 | The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document. | |
| CVE-2017-7379 | Med | 5.5 | < 0.9.2-3.3.1 | 0.9.2-3.3.1 | Apr 3, 2017 | The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PDF document. | |
| CVE-2017-7378 | Med | 5.5 | < 0.9.2-3.3.1 | 0.9.2-3.3.1 | Apr 3, 2017 | The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PDF document. | |
| CVE-2017-6847 | Med | 5.5 | < 0.9.2-3.3.1 | 0.9.2-3.3.1 | Mar 15, 2017 | The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. | |
| CVE-2017-6845 | Med | 5.5 | < 0.9.2-3.6.3 | 0.9.2-3.6.3 | Mar 15, 2017 | The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. | |
| CVE-2017-6844 | Hig | 7.8 | < 0.9.2-3.3.1 | 0.9.2-3.3.1 | Mar 15, 2017 | Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file. | |
| CVE-2017-6840 | Med | 5.5 | < 0.9.2-3.3.1 | 0.9.2-3.3.1 | Mar 15, 2017 | The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (invalid read) via a crafted file. |
- affected < 0.9.2-3.6.3fixed 0.9.2-3.6.3
An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append() in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
- affected < 0.9.2-3.3.1fixed 0.9.2-3.3.1
In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName() in PdfName.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.
- affected < 0.9.2-3.6.3fixed 0.9.2-3.6.3
In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function (base/PdfVecObjects.h). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file.
- affected < 0.9.2-3.6.3fixed 0.9.2-3.6.3
In PoDoFo 0.9.5, there is an integer overflow in the PdfObjectStreamParserObject::ReadObjectsFromStream function (base/PdfObjectStreamParserObject.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file.
- affected < 0.9.2-3.3.1fixed 0.9.2-3.3.1
PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function (base/PdfOutputStream.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.
- affected < 0.9.2-3.6.3fixed 0.9.2-3.6.3
In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PdfParser::ReadXRefSubsection function (base/PdfParser.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file.
- affected < 0.9.2-3.6.3fixed 0.9.2-3.6.3
In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function (base/PdfXRefStreamParserObject.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file.
- affected < 0.9.2-3.3.1fixed 0.9.2-3.3.1
The PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base/PdfXRefStreamParserObject.cpp:224 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted PDF file.
- affected < 0.9.2-3.3.1fixed 0.9.2-3.3.1
The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted PDF document.
- affected < 0.9.2-3.3.1fixed 0.9.2-3.3.1
The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
- affected < 0.9.2-3.6.3fixed 0.9.2-3.6.3
The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
- affected < 0.9.2-3.6.3fixed 0.9.2-3.6.3
The PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
- affected < 0.9.2-3.6.3fixed 0.9.2-3.6.3
The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
- affected < 0.9.2-3.3.1fixed 0.9.2-3.3.1
The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
- affected < 0.9.2-3.3.1fixed 0.9.2-3.3.1
The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PDF document.
- affected < 0.9.2-3.3.1fixed 0.9.2-3.3.1
The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PDF document.
- affected < 0.9.2-3.3.1fixed 0.9.2-3.3.1
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
- affected < 0.9.2-3.6.3fixed 0.9.2-3.6.3
The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
- affected < 0.9.2-3.3.1fixed 0.9.2-3.3.1
Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
- affected < 0.9.2-3.3.1fixed 0.9.2-3.3.1
The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (invalid read) via a crafted file.
Page 1 of 2