Stack-based buffer overflow in podofo - CVE-2018-12983

Vulnerability identifier: #VU36995

CSH Severity: Medium

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-12983

CWE-ID: CWE-121

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing a crafted pdf file. A remote unauthenticated attacker can trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

podofo
podofo (Alpine package)
libpodofo0_9_2
libpodofo0_9_2-debuginfo
podofo-debuginfo
podofo-debugsource
libpodofo-devel
podofo
mingw-podofo
libpodofo0_9_6
libpodofo0_9_6-debuginfo
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Workstation Extension
openSUSE Leap
Fedora

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

podofo (Alpine package) - update to 0.9.7-r0
libpodofo0_9_2 - update to 0.9.2-3.15.1
libpodofo0_9_2-debuginfo - update to 0.9.2-3.15.1
podofo-debuginfo - addressed in versions 0.9.2-3.15.1, 0.9.6-150300.3.6.1
podofo-debugsource - addressed in versions 0.9.2-3.15.1, 0.9.6-150300.3.6.1
libpodofo-devel - addressed in versions 0.9.2-3.15.1, 0.9.6-150300.3.6.1
podofo - addressed in versions 0.9.6-11.fc31, 0.9.6-11.fc32
mingw-podofo - addressed in versions 0.9.6-15.fc31, 0.9.6-15.fc32
libpodofo0_9_6 - update to 0.9.6-150300.3.6.1
libpodofo0_9_6-debuginfo - update to 0.9.6-150300.3.6.1
podofo - update to 0.9.6-150300.3.6.1

• https://bugzilla.redhat.com/show_bug.cgi?id=1595693
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LEJQUDZT4JRJSPZYY3UPSCTFPAC5TUHK/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UMEMSUUXA3SL3AZAKKCTZFXVPHTBBK3O/

• Multiple vulnerabilities in podofo.sourceforge.net podofo
• Stack-based buffer overflow in podofo (Alpine package)
• SUSE update for podofo
• SUSE update for podofo
• Fedora 31 update for mingw-podofo, podofo
• Fedora 32 update for mingw-podofo, podofo