CVE-2017-8378: Buffer Overflow
Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors related to moffsets.size.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/podofoto a version that resolves this vulnerability.Fixed in 0.9.6-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2017-8378?
CVE-2017-8378 is a high-severity vulnerability due to a heap-based buffer overflow that can lead to application crashes or other impacts.
How do I fix CVE-2017-8378?
To fix CVE-2017-8378, upgrade to a patched version of PoDoFo that addresses the heap-based buffer overflow issue.
What systems are affected by CVE-2017-8378?
CVE-2017-8378 specifically affects PoDoFo version 0.9.5.
What type of vulnerability is CVE-2017-8378?
CVE-2017-8378 is categorized as a heap-based buffer overflow vulnerability.
Can CVE-2017-8378 lead to remote code execution?
While CVE-2017-8378 can cause a denial of service, it is currently unclear if it can be exploited for remote code execution.