Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-12983

Опубликовано: 29 июн. 2018
Источник: nvd
CVSS3: 7.8
CVSS2: 6.8
EPSS Низкий

Описание

A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:podofo_project:podofo:0.9.6:rc1:*:*:*:*:*:*

EPSS

Процентиль: 61%
0.00409
Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 7 лет назад

A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file.

CVSS3: 7.8
debian
больше 7 лет назад

A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryp ...

suse-cvrf
больше 3 лет назад

Security update for podofo

suse-cvrf
больше 3 лет назад

Security update for podofo

CVSS3: 7.8
github
больше 3 лет назад

A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file.

EPSS

Процентиль: 61%
0.00409
Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-125