Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:13315
HistoryFeb 07, 2019 - 3:16 a.m.

Denial Of Service (DoS)

2019-02-0703:16:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.003 Low

EPSS

Percentile

69.4%

libpodofo.so is susceptible to denial of service (DoS). The attacker can send a malicious PDF file to the crop_page() function of tools/podofocrop/podofocrop.cpp which leads to the execution of pPage->GetObject()->GetDictionary().AddKey( PdfName("MediaBox"), var ) resulting in an unauthorized access to the memory.

CPENameOperatorVersion
libpodofo.sole0.9.1
podofo:edgeeq0.9.6-r2