Remote No

Type Denial of service

Description

The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

AVG-1426 podofo 0.9.5-2 0.9.6-1 Medium Fixed

https://www.openwall.com/lists/oss-security/2017/03/02/6
https://sourceforge.net/p/podofo/code/1892/