CVE-2017-8053

Опубликовано: 22 апр. 2017

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp).

Ссылки

http://openwall.com/lists/oss-security/2017/04/22/1
Mailing List
Third Party Advisory
http://www.evernote.com/l/AnGe5jS_MvNDaZvZW-fzvV37H4ggSf5IkQo/
Exploit
Third Party Advisory
http://openwall.com/lists/oss-security/2017/04/22/1
Mailing List
Third Party Advisory
http://www.evernote.com/l/AnGe5jS_MvNDaZvZW-fzvV37H4ggSf5IkQo/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:podofo_project:podofo:0.9.5:*:*:*:*:*:*:*

EPSS

Процентиль: 57%

0.00349

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-835

Связанные уязвимости

CVE-2017-8053

CVSS3: 5.5

ubuntu

почти 9 лет назад

PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp).

CVE-2017-8053

CVSS3: 5.5

debian

почти 9 лет назад

PoDoFo 0.9.5 allows denial of service (infinite recursion and stack co ...

GHSA-p7r7-9m7f-qm95

CVSS3: 5.5

github

больше 3 лет назад

PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp).

EPSS

Процентиль: 57%

0.00349

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-835