Browse CVEs

HIGH 8.8 CVE-2017-8787 The PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base/PdfXRefStreamParserObject.cpp:224 in PoDoFo 0.9.5 allows remote attackers… Podofo Mitigation only Fix from $1,9502017-05-05 CRITICAL 9.8 CVE-2017-8378 Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of … Podofo Patch available Fix from $2,3002017-05-01 MEDIUM 5.5 CVE-2017-8054 The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (infinite… Podofo No fix yet Fix from $1,6002017-04-22 MEDIUM 5.5 CVE-2017-8053 PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (… Podofo No fix yet Fix from $1,6002017-04-22 MEDIUM 6.5 CVE-2017-7994 The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer de… Podofo No fix yet Fix from $1,6002017-04-21 MEDIUM 5.5 CVE-2017-7379 The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (he… Podofo Mitigation only Fix from $1,6002017-04-03 MEDIUM 5.5 CVE-2017-7380 The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash)… Podofo Mitigation only Fix from $1,6002017-04-03 MEDIUM 5.5 CVE-2017-7381 The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash)… Podofo Mitigation only Fix from $1,6002017-04-03 MEDIUM 5.5 CVE-2017-7382 The PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application cra… Podofo Mitigation only Fix from $1,6002017-04-03 MEDIUM 5.5 CVE-2017-7383 The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application cra… Podofo Mitigation only Fix from $1,6002017-04-03 MEDIUM 5.5 CVE-2017-7378 The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer… Podofo Mitigation only Fix from $1,6002017-04-03 CRITICAL 9.8 CVE-2015-8981 Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified impact … Podofo Patch available Fix from $2,3002017-03-16 HIGH 7.8 CVE-2017-6843 Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecifie… Podofo Mitigation only Fix from $1,9502017-03-15 HIGH 7.8 CVE-2017-6844 Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified im… Podofo Mitigation only Fix from $1,9502017-03-15 MEDIUM 5.5 CVE-2017-6840 The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (invalid read) … Podofo Mitigation only Fix from $1,6002017-03-15 MEDIUM 5.5 CVE-2017-6841 The GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denia… Podofo Mitigation only Fix from $1,6002017-03-15 MEDIUM 5.5 CVE-2017-6842 The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer d… Podofo Mitigation only Fix from $1,6002017-03-15 MEDIUM 5.5 CVE-2017-6845 The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereferenc… Podofo Mitigation only Fix from $1,6002017-03-15 MEDIUM 5.5 CVE-2017-6846 The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a den… Podofo Mitigation only Fix from $1,6002017-03-15 MEDIUM 5.5 CVE-2017-6847 The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer deref… Podofo Mitigation only Fix from $1,6002017-03-15 MEDIUM 5.5 CVE-2017-6848 The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dere… Podofo Mitigation only Fix from $1,6002017-03-15 MEDIUM 5.5 CVE-2017-6849 The PoDoFo::PdfColorGray::~PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer d… Podofo Mitigation only Fix from $1,6002017-03-15 HIGH 7.8 CVE-2017-5886 Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have uns… Podofo Mitigation only Fix from $1,9502017-03-01 MEDIUM 5.5 CVE-2017-5854 base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file. Podofo Mitigation only Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2017-5855 The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointe… Podofo Mitigation only Fix from $1,6002017-03-01 HIGH 7.8 CVE-2017-5853 Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file. Podofo Mitigation only Fix from $1,9502017-03-01 MEDIUM 5.5 CVE-2017-5852 The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (… Podofo Mitigation only Fix from $1,6002017-03-01