tocsin

Debian/libpodofo: medium 5.5

The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file, because of ImageExtract

Action: Upgrade libpodofo to 0.9.8+dfsg-2 or later.

Affected

introducedfixedlast affected
00.9.8+dfsg-2-

Fixed versions

0.9.8+dfsg-2

Sources

published · modified · JSON