CVE-2019-9199: Null Pointer Dereference
Published Feb 26, 2019
·Updated
PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be triggered by sending a crafted PDF file to the podofoimpose binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Affected Software
3 affected components
Podofo Project Podofo=0.9.6
fedoraproject fedora=29
fedoraproject fedora=30
Event History
Feb 26, 2019
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-9199?
CVE-2019-9199 is classified as a Denial of Service vulnerability due to a NULL pointer dereference.
2
How do I fix CVE-2019-9199?
To remediate CVE-2019-9199, upgrade PoDoFo to version 0.9.6 or later.
3
What software is affected by CVE-2019-9199?
CVE-2019-9199 affects the PoDoFo version 0.9.6 and Fedora versions 29 and 30.
4
What type of attack does CVE-2019-9199 allow?
CVE-2019-9199 allows attackers to cause a Denial of Service, potentially leading to a segmentation fault.
5
Where in the code does CVE-2019-9199 occur?
CVE-2019-9199 occurs in the setSource() function of pdftranslator.cpp in PoDoFo.