PoDoFo 0.9.6

CPE Details

PoDoFo 0.9.6
podofo_project
podofo
0.9.6
2019-09-10
15h52 +00:00
2019-09-10
15h52 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:podofo_project:podofo:0.9.6:*:*:*:*:*:*:*

Informations

Vendor

podofo_project

Product

podofo

Version

0.9.6

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2019-20093 2019-12-30 02h47 +00:00 The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file, because of ImageExtractor.cpp.
5.5
Medium
CVE-2019-10723 2019-04-03 15h01 +00:00 An issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class in doc/PdfPagesTreeCache.cpp has an attempted excessive memory allocation because nInitialSize is not validated.
5.5
Medium
CVE-2019-9687 2019-03-11 15h00 +00:00 PoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF16toUTF8 in base/PdfString.cpp.
9.8
Critical
CVE-2018-20797 2019-02-27 16h00 +00:00 An issue was discovered in PoDoFo 0.9.6. There is an attempted excessive memory allocation in PoDoFo::podofo_calloc in base/PdfMemoryManagement.cpp when called from PoDoFo::PdfPredictorDecoder::PdfPredictorDecoder in base/PdfFiltersPrivate.cpp.
6.5
Medium
CVE-2019-9199 2019-02-25 23h00 +00:00 PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be triggered by sending a crafted PDF file to the podofoimpose binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
8.8
High
CVE-2018-20751 2019-02-04 19h00 +00:00 An issue was discovered in crop_page in PoDoFo 0.9.6. For a crafted PDF document, pPage->GetObject()->GetDictionary().AddKey(PdfName("MediaBox"),var) can be problematic due to the function GetObject() being called for the pPage NULL pointer object. The value of pPage at this point is 0x0, which causes a NULL pointer dereference.
8.8
High
CVE-2018-19532 2018-11-26 01h00 +00:00 A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by podofoimpose. It allows an attacker to cause Denial of Service.
8.8
High