GLSA-202105-30 : MuPDF: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202105-30 MuPDF: Multiple vulnerabilities Multiple vulnerabilities have been discovered in MuPDF. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially...

Fedora: Security Advisory for mupdf (FEDORA-2021-e1d8a99caa)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for zathura-pdf-mupdf (FEDORA-2021-e1d8a99caa)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: zathura-pdf-mupdf-0.3.7-2.fc34

This plugin adds PDF support to zathura using the mupdf rendering engine...

[SECURITY] Fedora 34 Update: mupdf-1.19.0-2.fc34

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

Debian DLA-2796-1 : jbig2dec - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2796 advisory. Two issues have been found in jbig2dec, a JBIG2 decoder library. One issue is related to an overflow with a crafted image file. The other is related to a NULL...

openSUSE 15 Security Update : mupdf (openSUSE-SU-2021:1341-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1341-1 advisory. - A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a...

openSUSE: Security Advisory for mupdf (openSUSE-SU-2021:1341-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for mupdf (important)

openSUSE Security Update: Security update for mupdf Announcement ID: openSUSE-SU-2021:1341-1 Rating: important References: 1190175 1190176 Cross-References: CVE-2020-16600 CVE-2020-19609 CVSS scores: CVE-2020-16600 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE...

Denial Of Service (DoS)

mupdf:stretch is vulnerable to denial of service. Buffer overflow in the main function in jstestmain.c in Mujstest in Artifex Software, Inc. MuPDF allows remote attackers to cause a denial of service out-of-bounds write via a crafted file...

Denial Of Service (DoS)

mupdf is vulnerable to denial of service. The vulnerability exists due to a Stack-based buffer overflow in jstestmain.c in mujstest...

Debian DLA-2765-1 : mupdf - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2765 advisory. Multiple issues have been discovered in mupdf. CVE-2016-10246 Buffer overflow in the main function in jstestmain.c allows remote attackers to cause a denial of...

Debian: Security Advisory (DLA-2765-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2765-1] mupdf security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2765-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky September 23, 2021 https://wiki.debian.org/LTS -...

DLA-2765-1 mupdf - security update

Bulletin has no description...

Denial Of Service

MuPDF is vulnerable to denial of service. The vulnerability exists due to an out of bounds write due to the cached color converter not properly considering the maximum key size of a hash table...

Denial Of Service (DoS)

Artifex MuPDF is vulnerable to denial of service. It has a heap based buffer over-write in tiffexpandcolormap function when parsing TIFF files allowing attackers to cause a denial of service...

mupdf:pdf_fuzzer: Heap-use-after-free in fz_draw_clip_image_mask

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5976259782901760 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzerasanmupdf Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60b00002c1f0 Cra...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in fz_is_infinite_irect

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5623656188346368 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in fz_paint_pixmap_with_mask

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5888564704444416 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...