Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7p4w-p3xm-vgfq

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.

In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.

EPSS

Процентиль: 83%
0.01945
Низкий

8.8 High

CVSS3

Дефекты

CWE-835

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 8 лет назад

In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.

CVSS3: 8.8
nvd
почти 8 лет назад

In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.

CVSS3: 8.8
debian
почти 8 лет назад

In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfPar ...

CVSS3: 8.8
fstec
почти 8 лет назад

Уязвимость функции PdfParserObject::ParseFileComplete() компонента PdfParserObject.cpp программной библиотеки для работы с PDF PoDoFo, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации и вызвать отказ в обслуживании

EPSS

Процентиль: 83%
0.01945
Низкий

8.8 High

CVSS3

Дефекты

CWE-835