Approved changes feed: RSS · Atom

cpe:2.3:a:podofo_project:podofo:0.9.4:*:*:*:*:*:*:*

part: a version: 0.9.4 update: *

VendorPodofo Project (40c7dbff-a5d2-5da1-b5ac-4a37194a5f17)
ProductPodofo (5171c380-d6f1-5d7c-9d2f-ee6cb330773d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mekentosj/podofo purl2cpe 2026-06-01 10:16:20.271390
pkg:rpm/fedora/podofo purl2cpe 2026-06-01 10:16:20.271392
pkg:rpm/opensuse/podofo purl2cpe 2026-06-01 10:16:20.271393
pkg:sourceforge/podofo purl2cpe 2026-06-01 10:16:20.271395

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-6849 vulnerable 2026-06-08 05:09:55.026079 Details available
The PoDoFo::PdfColorGray::~PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
Published: 2017-03-15T14:00:00.000Z
Updated: 2024-08-05T15:41:17.570Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6847 vulnerable 2026-06-08 05:09:55.025526 Details available
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
Published: 2017-03-15T14:00:00.000Z
Updated: 2024-08-05T15:41:17.658Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6846 vulnerable 2026-06-08 05:09:55.025241 Details available
The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
Published: 2017-03-15T14:00:00.000Z
Updated: 2024-08-05T15:41:17.692Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6845 vulnerable 2026-06-08 05:09:55.024840 Details available
The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
Published: 2017-03-15T14:00:00.000Z
Updated: 2024-08-05T15:41:17.697Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6844 vulnerable 2026-06-08 05:09:55.024560 Details available
Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
Published: 2017-03-15T14:00:00.000Z
Updated: 2024-08-05T15:41:17.565Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6843 vulnerable 2026-06-08 05:09:55.024264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5886 vulnerable 2026-06-08 05:09:50.058205 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5855 vulnerable 2026-06-08 05:09:49.925524 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5854 vulnerable 2026-06-08 05:09:49.925229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5853 vulnerable 2026-06-08 05:09:49.924842 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5852 vulnerable 2026-06-08 05:09:49.924436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.