Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-5308

Опубликовано: 09 янв. 2018
Источник: nvd
CVSS3: 7.8
CVSS2: 6.8
EPSS Низкий

Описание

PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function (base/PdfOutputStream.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:podofo_project:podofo:0.9.5:*:*:*:*:*:*:*

EPSS

Процентиль: 76%
0.00957
Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 8 лет назад

PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function (base/PdfOutputStream.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.

CVSS3: 7.8
debian
около 8 лет назад

PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMem ...

CVSS3: 7.8
github
больше 3 лет назад

PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function (base/PdfOutputStream.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.

suse-cvrf
больше 1 года назад

Security update for podofo

suse-cvrf
почти 7 лет назад

Security update for podofo

EPSS

Процентиль: 76%
0.00957
Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-476