#10 CVE-2017-6841 - NULL pointer dereference in GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement

[Mattia Rizzolo]

https://security-tracker.debian.org/tracker/CVE-2017-6841
http://www.openwall.com/lists/oss-security/2017/03/02/2https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-graphicsstacktgraphicsstackelementtgraphicsstackelement-graphicsstack-h
https://bugs.debian.org/861558

The GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

[zyx]

This is fied with revision 1892:
http://sourceforge.net/p/podofo/code/1892