PO
Product
Podofo
63
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 18Medium 42Low 0
Watch
Add Podofo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-7378 | 5.5 | Apr 3 | The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application… Affected: 0.9.5 |
| CVE-2017-6849 | 5.5 | Mar 15 | The PoDoFo::PdfColorGray::~PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file Affected: 0.9.4 |
| CVE-2017-6848 | 5.5 | Mar 15 | The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file Affected: 0.9.5 |
| CVE-2017-6847 | 5.5 | Mar 15 | The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file Affected: 0.9.4 |
| CVE-2017-6846 | 5.5 | Mar 15 | The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer… Affected: 0.9.4 |
| CVE-2017-6845 | 5.5 | Mar 15 | The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file Affected: 0.9.4 |
| CVE-2017-6842 | 5.5 | Mar 15 | The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file Affected: 0.9.5 |
| CVE-2017-6841 | 5.5 | Mar 15 | The GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer… Affected: 0.9.5 |
| CVE-2017-6840 | 5.5 | Mar 15 | The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (invalid read) via a crafted file Affected: 0.9.5 |
| CVE-2017-5855 | 5.5 | Mar 1 | The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted… Affected: 0.9.4 |
| CVE-2017-5854 | 5.5 | Mar 1 | base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file Affected: 0.9.4 |
| CVE-2017-5852 | 5.5 | Mar 1 | The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted… Affected: 0.9.4 |
| CVE-2023-2241 | 5.3 | Apr 22 | A vulnerability, which was classified as critical, was found in PoDoFo 0.10.0 Affected: 0.10.0 |