mupdf: arbitrary code execution

ID ASA-201608-22
Type archlinux
Reporter Arch Linux
Modified 2016-08-30T00:00:00


Yu Hong and Zheng Jihong discovered a heap overflow vulnerability within the pdf_load_mesh_params function, allowing an attacker to cause an application crash (denial-of-service), or potentially to execute arbitrary code with the privileges of the user running MuPDF, if a specially crafted PDF file is processed.