PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp).
References
Link | Resource |
---|---|
http://www.evernote.com/l/AnGe5jS_MvNDaZvZW-fzvV37H4ggSf5IkQo/ | Exploit Third Party Advisory |
http://openwall.com/lists/oss-security/2017/04/22/1 | Mailing List Third Party Advisory |
Configurations
Information
Published : 2017-04-22 14:59
Updated : 2019-10-02 17:03
NVD link : CVE-2017-8053
Mitre link : CVE-2017-8053
JSON object : View
CWE
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
Products Affected
podofo_project
- podofo