CVE-2017-5854

概要

参考情報

• openwall.com/lists/oss-security/2017/02/01/14 · Mailing List
• openwall.com/lists/oss-security/2017/02/02/12 · Mailing List
• securityfocus.com/bid/96072
• blogs.gentoo.org/ago/2017/02/01/podofo-null-pointer-dereference-in-pdfoutputstream-cpp · Third Party Advisory

podofo のその他の脆弱性

• CVE-2025-46205高 8.1A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Servic…
• CVE-2025-9394中 5.5A flaw has been found in PoDoFo 1.1.0-dev. This issue affects the function PdfTokenizer::DetermineDataType of the file src/podofo/main/PdfTo…
• CVE-2023-31568高 8.8Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4.
• CVE-2023-31567高 8.8Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3.
• CVE-2023-31566高 8.8Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted().