CVE-2018-5295

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.5

Description The issue is related to an integer overflow in the PdfXRefStreamParserObject::ParseStream function. This could allow remote attackers to cause a denial-of-service by providing a crafted pdf file.

Recommendations For PoDoFo version 0.9.5, consider applying a patch or fix that addresses the integer overflow in the PdfXRefStreamParserObject::ParseStream function to prevent denial-of-service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.