CVE-2019-9687: Buffer Overflow
PoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF16toUTF8 in base/PdfString.cpp.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/podofoto a version that resolves this vulnerability.Fixed in 0.9.7-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2019-9687?
CVE-2019-9687 is classified as a high severity vulnerability due to its potential to cause a heap-based buffer overflow.
How do I fix CVE-2019-9687?
To fix CVE-2019-9687, update to the latest version of PoDoFo or apply any available patches that address this vulnerability.
What software is affected by CVE-2019-9687?
CVE-2019-9687 specifically affects PoDoFo version 0.9.6 and Fedora version 29.
Is CVE-2019-9687 a remote exploitation vulnerability?
CVE-2019-9687 can be exploited remotely, making it critical to patch affected systems as soon as possible.
What protocols are impacted by CVE-2019-9687?
CVE-2019-9687 impacts applications that utilize PoDoFo to handle PDF files, particularly in how they process strings.