CVE-2018-6352: Medium severity Podofo Project Podofo vulnerability

Published Jan 27, 2018

Updated

In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file.

Affected Software

1 affected component

Podofo Project Podofo=0.9.5

Event History

Jan 27, 2018

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Data Sourced

via NVD·03:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2018-6352?

CVE-2018-6352 is classified as a denial of service vulnerability that can significantly impact the availability of the affected system.

How do I fix CVE-2018-6352?

To mitigate CVE-2018-6352, upgrade PoDoFo to version 0.9.6 or later where this issue is addressed.

What does CVE-2018-6352 affect?

CVE-2018-6352 specifically affects PoDoFo version 0.9.5, allowing crafted PDF files to cause excessive iterations.

Can CVE-2018-6352 be exploited remotely?

Yes, CVE-2018-6352 can be exploited remotely when a user opens a crafted PDF file.

What is the impact of CVE-2018-6352 on systems?

The impact of CVE-2018-6352 can lead to a denial of service, rendering the affected application unresponsive.