CVE-2017-7379 — Out-of-bounds Read in Project Podofo
Severity
5.5MEDIUMNVD
EPSS
0.8%
top 25.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 3
Latest updateMay 13
Description
The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PDF document.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages2 packages
🔴Vulnerability Details
2📋Vendor Advisories
1Debian▶
CVE-2017-7379: libpodofo - The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in ...↗2017
💬Community
5Bugzilla▶
CVE-2017-7378 CVE-2017-7379 CVE-2017-7380 CVE-2017-7381 CVE-2017-7382 CVE-2017-7383 CVE-2017-7994 CVE-2017-8053 CVE-2017-8054 podofo: various flaws [epel-all]↗2017-04-03
Bugzilla▶
CVE-2017-7378 CVE-2017-7379 CVE-2017-7380 CVE-2017-7381 CVE-2017-7382 CVE-2017-7383 CVE-2017-7994 CVE-2017-8053 CVE-2017-8054 podofo: various flaws [fedora-all]↗2017-04-03
Bugzilla▶
CVE-2017-7378 CVE-2017-7379 CVE-2017-7380 CVE-2017-7381 CVE-2017-7382 CVE-2017-7383 podofo: Multiple security issues found in 0.9.5 version [epel-all]↗2017-04-03
Bugzilla▶
CVE-2017-7378 CVE-2017-7379 CVE-2017-7380 CVE-2017-7381 CVE-2017-7382 CVE-2017-7383 podofo: Multiple security issues found in 0.9.5 version [fedora-all]↗2017-04-03
Bugzilla▶
CVE-2017-7383 CVE-2017-7382 CVE-2017-7381 CVE-2017-7380 CVE-2017-7379 CVE-2017-7378 podofo: Multiple security issues found in 0.9.5 version↗2017-04-03