CVE-2018-5295 log

Source
Severity Low
Remote No
Type Denial of service
Description
In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function (base/PdfXRefStreamParserObject.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file.
Group Package Affected Fixed Severity Status Ticket
AVG-1426 podofo 0.9.5-2 0.9.6-1 Medium Fixed
References
https://sourceforge.net/p/podofo/mailman/podofo-users/thread/CAKWchxDWuuiM-3N-gL45r6eu1xOY1NPGhmZXUO0TUd5%3DwnmR7g%40mail.gmail.com/#msg36180168
https://bugzilla.redhat.com/show_bug.cgi?id=1531897
https://bugzilla.redhat.com/attachment.cgi?id=1377905
https://sourceforge.net/p/podofo/code/1889/