CVE-2018-12983

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.6-rc1

Description A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file.

Recommendations For PoDoFo version 0.9.6-rc1, as a temporary workaround, consider disabling the PdfEncryptMD5Base::ComputeEncryptionKey() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.