Fluid Attacks Database

Description

The PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base/PdfXRefStreamParserObject.cpp:224 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted PDF file.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	libpodofo	>=0 <0.9.5-7	0.9.5-7
debian 13	libpodofo	>=0 <0.9.5-7	0.9.5-7
debian 11	libpodofo	>=0 <0.9.5-7	0.9.5-7
debian 14	libpodofo	>=0 <0.9.5-7	0.9.5-7

Aliases

1. CVE-2017-87872. NVD-2017-87873. OSV-DEBIAN-2017-87874. OSV-2017-87875. SECURITY-TRACKER-CVE-2017-8787

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.