Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service (DoS) by supplying a crafted PDF file. NOTE: this is disputed by the Supplier because there is no available file to reproduce the issue.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PoDoFo 安全漏洞
Vulnerability Description
PoDoFo是PoDoFo开源的一个免费的可移植 C++ 库。 PoDoFo v0.10.0版本至v0.10.5版本存在安全漏洞,该漏洞源于PdfTokenizer::ReadDictionary函数存在堆释放后重用,可能导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A