Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-9199

Опубликовано: 26 фев. 2019
Источник: nvd
CVSS3: 8.8
CVSS2: 6.8
EPSS Низкий

Описание

PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be triggered by sending a crafted PDF file to the podofoimpose binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:podofo_project:podofo:0.9.6:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

EPSS

Процентиль: 63%
0.0045
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 7 лет назад

PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be triggered by sending a crafted PDF file to the podofoimpose binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.

CVSS3: 8.8
debian
почти 7 лет назад

PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoD ...

CVSS3: 8.8
github
больше 3 лет назад

PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be triggered by sending a crafted PDF file to the podofoimpose binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.

suse-cvrf
больше 1 года назад

Security update for podofo

suse-cvrf
больше 1 года назад

Security update for podofo

EPSS

Процентиль: 63%
0.0045
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-476