CVE-2015-8981

Опубликовано: 16 мар. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified impact via vectors related to m_offsets.size.

Ссылки

http://www.openwall.com/lists/oss-security/2017/02/01/20
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/02/02/15
Mailing List
Third Party Advisory
https://sourceforge.net/p/podofo/code/1672
Patch
https://sourceforge.net/p/podofo/mailman/message/34205419/
Patch
http://www.openwall.com/lists/oss-security/2017/02/01/20
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/02/02/15
Mailing List
Third Party Advisory
https://sourceforge.net/p/podofo/code/1672
Patch
https://sourceforge.net/p/podofo/mailman/message/34205419/
Patch

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:podofo_project:podofo:-:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02618

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2015-8981

CVSS3: 9.8

ubuntu

больше 9 лет назад

Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified impact via vectors related to m_offsets.size.

CVE-2015-8981

CVSS3: 9.8

debian

больше 9 лет назад

Heap-based buffer overflow in the PdfParser::ReadXRefSubsection functi ...

GHSA-w4xc-2f8w-q8h5

CVSS3: 9.8

github

больше 4 лет назад

Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified impact via vectors related to m_offsets.size.

SUSE-SU-2024:3550-1

suse-cvrf

почти 2 года назад

Security update for podofo

SUSE-SU-2024:3541-1

suse-cvrf

почти 2 года назад

Security update for podofo

EPSS

Процентиль: 84%

0.02618

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119