CVE-2018-5783: Medium severity Podofo Project Podofo vulnerability
Published Jan 19, 2018
·Updated
In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function (base/PdfVecObjects.h). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file.
Affected Software
1 affected component
Podofo Project Podofo=0.9.5
Event History
Jan 19, 2018
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Data Sourced
via NVD·08:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-5783?
CVE-2018-5783 is categorized as a denial of service vulnerability.
2
How do I fix CVE-2018-5783?
To mitigate CVE-2018-5783, upgrade to PoDoFo version 0.9.6 or later.
3
What can an attacker do with CVE-2018-5783?
An attacker can exploit CVE-2018-5783 to cause a denial of service by sending a crafted PDF file.
4
In which software version does CVE-2018-5783 exist?
CVE-2018-5783 exists in PoDoFo version 0.9.5.
5
Which function is affected by CVE-2018-5783?
CVE-2018-5783 affects the PoDoFo::PdfVecObjects::Reserve function.