high8.8
CVE-2018-19532
A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject,…
Impact
A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by podofoimpose. It allows an attacker to cause Denial of Service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Podofo Project | Podofo | Version 0.9.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-pdftranslatorsettarget-podofo-0-9-6/
- https://sourceforge.net/p/podofo/tickets/32/
- https://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-pdftranslatorsettarget-podofo-0-9-6/
- https://sourceforge.net/p/podofo/tickets/32/