#9 CVE-2017-6846 - NULL pointer dereference in GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace

[Mattia Rizzolo]

https://security-tracker.debian.org/tracker/CVE-2017-6846
http://www.openwall.com/lists/oss-security/2017/03/02/7
https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-graphicsstacktgraphicsstackelementsetnonstrokingcolorspace-graphicsstack-h/
https://bugs.debian.org/861563

The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

[Mattia Rizzolo]

Dominik is speculating that this might already be covered by the fix for CVE-2017-6845. Somebody should test this out.
https://sourceforge.net/p/podofo/mailman/message/36205895/

[zyx]

I can confirm this is fixed with revision 1892:
http://sourceforge.net/p/podofo/code/1892