CVE-2017-6843

Опубликовано: 15 мар. 2017

Источник: debian

Описание

Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
libpodofo	fixed	0.9.4-6		package
libpodofo	no-dsa		jessie	package

Примечания

https://www.openwall.com/lists/oss-security/2017/03/02/4
https://blogs.gentoo.org/ago/2017/03/02/podofo-heap-based-buffer-overflow-in-podofopdfvariantdelayedload-pdfvariant-h
upstream commit: http://sourceforge.net/p/podofo/code/1844
upstream commit: http://sourceforge.net/p/podofo/code/1845

Связанные уязвимости

CVE-2017-6843

CVSS3: 7.8

ubuntu

почти 9 лет назад

Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.

CVE-2017-6843

CVSS3: 7.8

nvd

почти 9 лет назад

Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.

GHSA-85wf-fhxw-8876

CVSS3: 7.8

github

больше 3 лет назад

Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.