PT-2017-7516 · Podofo+1 · Podofo+1

Hanno Böck · Published 2017-03-16 · Updated 2024-10-08 · CVE-2015-8981

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PoDoFo (affected versions not specified)

Description A heap-based buffer overflow issue exists in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp. This issue allows attackers to have an unspecified impact via vectors related to m offsets.size.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2015-8981

DLA-929-1

OPENSUSE-SU-2024_3550-1

SUSE-SU-2024:3541-1

SUSE-SU-2024:3550-1

SUSE-SU-2024_3541-1

Affected Products

Podofo

Suse

References · 77

• https://osv.dev/vulnerability/SUSE-SU-2024:3550-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-8981 · Security Note
• https://ubuntu.com/security/CVE-2015-8981 · Vendor Advisory
• https://sourceforge.net/p/podofo/mailman/message/34205419 · Patch
• https://cve.org/CVERecord?id=CVE-2015-8981 · Security Note
• https://osv.dev/vulnerability/CVE-2015-8981 · Vendor Advisory
• https://sourceforge.net/p/podofo/code/1672 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-8981 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-8981 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-8981 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3541-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2015-8981.html · Note
• https://suse.com/security/cve/CVE-2018-8001.html · Note
• https://lists.opensuse.org/archives/list/[e-mail]/thread/2GWIRZHT3JTAA33TPFFMMQWIJ5DDDPWH · Note
• https://suse.com/security/cve/CVE-2018-8001 · Note