CVE-2017-14685

2017-09-22T06:29:00
ID CVE-2017-14685
Type cve
Reporter cve@mitre.org
Modified 2017-11-05T01:29:00

Description

Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016aa61" on Windows. This occurs because xps_load_links_in_glyphs in xps/xps-link.c does not verify that an xps font could be loaded.