mupdf: arbitrary code execution

2016-08-30T00:00:00
ID ASA-201608-21
Type archlinux
Reporter Arch Linux
Modified 2016-08-30T00:00:00

Description

Marco Grassi discovered a use-after-free vulnerability in MuPDF. An attacker can take advantage of this flaw to cause an application crash (denial-of-service), or potentially to execute arbitrary code with the privileges of the user running MuPDF, if a specially crafted PDF file is processed.