mupdf: arbitrary code execution

ID ASA-201608-21
Type archlinux
Reporter Arch Linux
Modified 2016-08-30T00:00:00


Marco Grassi discovered a use-after-free vulnerability in MuPDF. An attacker can take advantage of this flaw to cause an application crash (denial-of-service), or potentially to execute arbitrary code with the privileges of the user running MuPDF, if a specially crafted PDF file is processed.