CVE-2017-8378

Critical

Published: 01/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Heap-based buffer overflow in the PdfParser::ReadObjects function in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

Risk Assessment

Attackers may exploit this vulnerability to remotely trigger application crashes, leading to service availability interruptions.

Recommendation

It is recommended to update PoDoFo to the latest version to mitigate this vulnerability and to monitor systems for unauthorized access attempts.

Original NVD description (English source)

Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors related to m_offsets.size.