Published: 26/02/2019 Updated: 07/11/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be triggered by sending a crafted PDF file to the podofoimpose binary. It allows an malicious user to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.

Vulnerable Product	Search on Vulmon	Subscribe to Product
podofo project podofo 0.9.6
fedoraproject fedora 29
fedoraproject fedora 30

Debian Bug report logs - #923469 libpodofo: CVE-2019-9199 Package: src:libpodofo; Maintainer for src:libpodofo is Mattia Rizzolo <mattia@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 28 Feb 2019 16:15:02 UTC Severity: important Tags: fixed-upstream, security, upstream Found in version ...

Debian Bug report logs - #924430 libpodofo: CVE-2019-9687 Package: src:libpodofo; Maintainer for src:libpodofo is Mattia Rizzolo <mattia@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 12 Mar 2019 21:39:04 UTC Severity: important Tags: security, upstream Found in version libpodofo/096 ...

PoDoFo::Impose::PdfTranslator::setSource() in pdftranslatorcpp in PoDoFo 096 has a NULL pointer dereference that can (for example) be triggered by sending a crafted PDF file to the podofoimpose binary It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact ...

CWE-476 https://sourceforge.net/p/podofo/tickets/40/https://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-setsource-podofo-0-9-6-trunk-r1967/https://github.com/mksdev/podofo/commit/1400a9aaf611299b9a56aa2abeb158918b9743c8 https://github.com/jjanku/podofo/commit/ada821df68fb0bf673840ed525daf4ec709dbfd9 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NTJ5AAM6Y4NMSELEH7N5ZG4DNO56BCYF/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CIC2EXSSMBT3MY2HY42IIY4BUQS2SVYB/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=923469 https://nvd.nist.gov

CVE-2019-9199

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect