CVE-2017-6844: Buffer Overflow
Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/podofoto a version that resolves this vulnerability.Fixed in 0.9.5-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6844?
The severity of CVE-2017-6844 is considered to be high due to the potential for remote code execution via crafted PDF files.
How do I fix CVE-2017-6844?
To fix CVE-2017-6844, upgrade PoDoFo to a newer version that has addressed this buffer overflow vulnerability.
What software is affected by CVE-2017-6844?
CVE-2017-6844 affects PoDoFo version 0.9.4 specifically.
Can CVE-2017-6844 be exploited remotely?
Yes, CVE-2017-6844 can be exploited remotely through the use of specially crafted PDF files.
What function in PoDoFo is vulnerable due to CVE-2017-6844?
The vulnerable function in PoDoFo identified by CVE-2017-6844 is PoDoFo::PdfParser::ReadXRefSubsection.