CVE-2017-6844: Buffer Overflow
Published Mar 15, 2017
·Updated
Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
Affected Software
1 affected component
Podofo Project Podofo=0.9.4
Event History
Mar 15, 2017
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-6844?
The severity of CVE-2017-6844 is considered to be high due to the potential for remote code execution via crafted PDF files.
2
How do I fix CVE-2017-6844?
To fix CVE-2017-6844, upgrade PoDoFo to a newer version that has addressed this buffer overflow vulnerability.
3
What software is affected by CVE-2017-6844?
CVE-2017-6844 affects PoDoFo version 0.9.4 specifically.
4
Can CVE-2017-6844 be exploited remotely?
Yes, CVE-2017-6844 can be exploited remotely through the use of specially crafted PDF files.
5
What function in PoDoFo is vulnerable due to CVE-2017-6844?
The vulnerable function in PoDoFo identified by CVE-2017-6844 is PoDoFo::PdfParser::ReadXRefSubsection.