CVE-2017-8054 PUBLISHED

The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted PDF document.

EPSS 0.42% · 61.8th percentile

Risk Scores

EPSS Score
0.42%
61.8th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSlibpodofo0, 0.9.0-1.1ubuntu1, 0.9.0-1.2
Ubuntu:Pro:16.04:LTSlibpodofo0, 0.9.0-1.3, 0.9.3-3

Timeline

References

Open in Interactive Console →