CVE-2018-8002

Published: Mar 9, 2018Modified: Nov 21, 2024

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.

Affected (1)

Products: Podofo Project: Podofo

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Podofo Project Podofo	Version 0.9.5

Related CWEs

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (4)

https://bugzilla.redhat.com/show_bug.cgi?id=1548930

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://www.exploit-db.com/exploits/44946/

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1548930

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://www.exploit-db.com/exploits/44946/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

Timeline

No history available yet.