Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior

Críticas / altas1389▼ 28 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior

65 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2017-6849	Modificada	Media (5.5)	1.3%	—	Podofo Project Podofo	15/3/2017	17/6/2026	The PoDoFo::PdfColorGray::~PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-6848	Modificada	Media (5.5)	1.3%	—	Podofo Project Podofo	15/3/2017	17/6/2026	The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-6847	Modificada	Media (5.5)	1.3%	—	Podofo Project Podofo	15/3/2017	17/6/2026	The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-6846	Modificada	Media (5.5)	1.3%	—	Podofo Project Podofo	15/3/2017	17/6/2026	The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-6845	Modificada	Media (5.5)	1.3%	—	Podofo Project Podofo	15/3/2017	17/6/2026	The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-6844	Modificada	Alta (7.8)	1.5%	—	Podofo Project Podofo	15/3/2017	17/6/2026	Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
CVE-2017-6843	Modificada	Alta (7.8)	1.5%	—	Podofo Project Podofo	15/3/2017	17/6/2026	Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
CVE-2017-6842	Modificada	Media (5.5)	1.0%	—	Podofo Project Podofo	15/3/2017	17/6/2026	The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-6841	Modificada	Media (5.5)	1.0%	—	Podofo Project Podofo	15/3/2017	17/6/2026	The GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-6840	Modificada	Media (5.5)	1.0%	—	Podofo Project Podofo	15/3/2017	17/6/2026	The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (invalid read) via a crafted file.
CVE-2017-5886	Modificada	Alta (7.8)	1.7%	—	Podofo Project Podofo	1/3/2017	17/6/2026	Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
CVE-2017-5855	Modificada	Media (5.5)	1.0%	—	Podofo Project Podofo	1/3/2017	17/6/2026	The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-5854	Modificada	Media (5.5)	1.5%	—	Podofo Project Podofo	1/3/2017	17/6/2026	base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.
CVE-2017-5853	Modificada	Alta (7.8)	1.3%	—	Podofo Project Podofo	1/3/2017	17/6/2026	Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
CVE-2017-5852	Modificada	Media (5.5)	1.4%	—	Podofo Project Podofo	1/3/2017	17/6/2026	The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted file.