[Podofo-users] PDF CVE Security Research

2018-04-18 Thread Mark Rogers
Hi This will be of interest to anyone testing PoDoFo or reviewing submitted patches. It’s an analysis of 122 PDF CVEs found across a number of PDF products presented at the Blackhat Security conference in March 2017. Products with most CVEs found: 88 - Acrobat 88 15 - Foxit 15 8 – Adobe Digita

Re: [Podofo-users] [PATCH] PoFoFo: fix CVE-2018-5296 by reducing limit in s_nMaxObjects

2018-04-18 Thread Mark Rogers
Hi VeraPDF enforces the 8,388,607 indirect object limit: https://github.com/veraPDF/veraPDF-validation-profiles/wiki/PDFA-Part-1-rules#rule-6112-7 This answer on Adobe.com expands on the reason for the limit: https://forums.adobe.com/thread/1041350 (Adobe Reader can’t load files with more than 8