CVE-2015-8981
Heap-based buffer overflow in the PdfParser::ReadXRefSubsection functi ...
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Ubuntu (orta).
Açıklama
Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified impact via vectors related to m_offsets.size.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | libpodofo | 0.9.4-1 |
| debian 12 | libpodofo | 0.9.4-1 |
| debian 13 | libpodofo | 0.9.4-1 |
| debian 14 | libpodofo | 0.9.4-1 |
| debian 7 | libpodofo | 0.9.0-1.1+deb7u1 |
| debian 8 | libpodofo | düzeltme belirtilmemiş |
| echo | libpodofo | 0.9.4-1 |
| ubuntu 14.04-ESM | libpodofo | 0.9.0-1.2ubuntu0.1~esm1 |
Referanslar
- http://www.openwall.com/lists/oss-security/2017/02/01/20
- http://www.openwall.com/lists/oss-security/2017/02/02/15
- https://marc.info/?l=oss-security&m=148601605717859&w=2
- https://sourceforge.net/p/podofo/code/1672
- https://sourceforge.net/p/podofo/mailman/message/34205419/
- https://www.cve.org/CVERecord?id=CVE-2015-8981