| Severity |
|
| Remote |
|
| Type |
| - |
Unknown |
| + |
Denial of service |
|
| Description |
| + |
In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function (base/PdfXRefStreamParserObject.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file. |
|
| References |
| + |
https://sourceforge.net/p/podofo/mailman/podofo-users/thread/CAKWchxDWuuiM-3N-gL45r6eu1xOY1NPGhmZXUO0TUd5%3DwnmR7g%40mail.gmail.com/#msg36180168 |
| + |
https://bugzilla.redhat.com/show_bug.cgi?id=1531897 |
| + |
https://bugzilla.redhat.com/attachment.cgi?id=1377905 |
| + |
https://sourceforge.net/p/podofo/code/1889/ |
|