Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x3rj-x39v-qcpg

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function (base/PdfXRefStreamParserObject.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file.

In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function (base/PdfXRefStreamParserObject.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file.

EPSS

Процентиль: 59%
0.00374
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 8 лет назад

In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function (base/PdfXRefStreamParserObject.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file.

CVSS3: 5.5
nvd
около 8 лет назад

In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function (base/PdfXRefStreamParserObject.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file.

CVSS3: 5.5
debian
около 8 лет назад

In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamPars ...

suse-cvrf
почти 7 лет назад

Security update for podofo

suse-cvrf
около 7 лет назад

Security update for podofo

EPSS

Процентиль: 59%
0.00374
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-190