Lucene search
K

1343 matches found

Cvelist
Cvelist
added 2019/07/04 9:7 p.m.38 views

CVE-2019-13290

Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fzappenddisplaynode located at fitz/list-device.c, allowing remote attackers to execute arbitrary code via a crafted PDF file. This occurs with a large BDC property name that overflows the allocated size of a display list node...

7.8AI score0.03032EPSS
Exploits1References7
CVE
CVE
added 2019/07/04 9:7 p.m.151 views

CVE-2019-13290

The CVE-2019-13290 issue affects MuPDF, specifically Artifex MuPDF 1.15.0, with a heap-based buffer overflow in fz_append_display_node (fitz/list-device.c) triggered by a crafted PDF’s large BDC property name. This allows remote attackers to execute arbitrary code by exploiting the overflow. Debi...

7.8CVSS7.8AI score0.03032EPSS
Exploits1References7Affected Software1
Debian CVE
Debian CVE
added 2019/07/04 9:7 p.m.29 views

CVE-2019-13290

Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fzappenddisplaynode located at fitz/list-device.c, allowing remote attackers to execute arbitrary code via a crafted PDF file. This occurs with a large BDC property name that overflows the allocated size of a display list node...

7.8CVSS7.9AI score0.03032EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2019/07/01 12:0 a.m.33 views

Debian DLA-1838-1 : mupdf security update

Several minor issues have been fixed in mupdf, a lightweight PDF viewer tailored for display of high quality anti-aliased graphics. CVE-2018-5686 In MuPDF, there was an infinite loop vulnerability and application hang in the pdfparsearray function pdf/pdf-parse.c because EOF not having been...

5.5CVSS6.2AI score0.01881EPSS
Exploits3References5
OpenVAS
OpenVAS
added 2019/06/29 12:0 a.m.30 views

Debian: Security Advisory (DLA-1838-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.8AI score0.01881EPSS
Exploits3References3
Debian
Debian
added 2019/06/28 10:0 a.m.541 views

[SECURITY] [DLA 1838-1] mupdf security update

Package : mupdf Version : 1.5-1+deb8u6 CVE ID : CVE-2018-5686 CVE-2019-6130 CVE-2018-6192 Debian Bug : 887130 888487 918971 Several minor issues have been fixed in mupdf, a lightweight PDF viewer tailored for display of high quality anti-aliased graphics. CVE-2018-5686 In MuPDF, there was an...

5.5CVSS6.7AI score0.01881EPSS
Exploits3
OSV
OSV
added 2019/06/28 12:0 a.m.41 views

DLA-1838-1 mupdf - security update

Bulletin has no description...

5.5CVSS5.6AI score0.01881EPSS
Exploits3
CNVD
CNVD
added 2019/06/14 12:0 a.m.2 views

Artifex Software MuPDF Code Issue Vulnerability

Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A code issue vulnerability exists in the 'fzloadjpeg' function in Artifex Software MuPDF version 1.14. The vulnerability stems from an improperly designed or implemented code development process for a networked...

9.8CVSS7.6AI score0.03215EPSS
Exploits0References1
Prion
Prion
added 2019/06/13 6:29 p.m.17 views

Heap overflow

Usage of an uninitialized variable in the function fzloadjpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allows an attacker to execute arbitrary code...

7.5CVSS9.7AI score0.03215EPSS
Exploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2019/06/13 6:29 p.m.23 views

CVE-2019-7321

Usage of an uninitialized variable in the function fzloadjpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allows an attacker to execute arbitrary code...

9.8CVSS7.5AI score0.03215EPSS
Exploits0References3
NVD
NVD
added 2019/06/13 6:29 p.m.17 views

CVE-2019-7321

Usage of an uninitialized variable in the function fzloadjpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allows an attacker to execute arbitrary code...

9.8CVSS9.8AI score0.03215EPSS
Exploits0References3
OSV
OSV
added 2019/06/13 6:29 p.m.14 views

CVE-2019-7321

Usage of an uninitialized variable in the function fzloadjpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allows an attacker to execute arbitrary code...

9.8CVSS7.7AI score
Exploits0References3
CVE
CVE
added 2019/06/13 5:20 p.m.56 views

CVE-2019-7321

CVE-2019-7321 affects Artifex MuPDF 1.14 via an uninitialized variable in the function fz_load_jpeg, causing a heap overflow that can enable arbitrary code execution. The connected PT security entry corroborates this and recommends upgrading to a newer MuPDF version that contains a fix. No explic...

9.8CVSS9.7AI score0.03215EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2019/06/13 5:20 p.m.20 views

CVE-2019-7321

Usage of an uninitialized variable in the function fzloadjpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allows an attacker to execute arbitrary code...

9.8AI score0.03215EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2019/06/13 5:20 p.m.28 views

CVE-2019-7321

Usage of an uninitialized variable in the function fzloadjpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allows an attacker to execute arbitrary code...

9.8CVSS9.8AI score0.03215EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2019/06/06 12:0 a.m.5 views

PT-2019-6176 · Artifex +2 · Mupdf +2

Name of the Vulnerable Software and Affected Versions: Artifex MuPDF versions prior to 1.18.0 Description: The issue is related to a heap-based buffer over-write in the tiff expand colormap function when parsing TIFF files. This allows attackers to cause a denial of service. The exploitation of...

7.8CVSS6.2AI score0.15181EPSS
Exploits12References54
Tenable Nessus
Tenable Nessus
added 2019/05/28 12:0 a.m.34 views

Fedora 29 : mupdf (2019-15af6a9a07)

rebase to 1.15.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...

5.5CVSS6AI score0.01571EPSS
Exploits4References5
OpenVAS
OpenVAS
added 2019/05/26 12:0 a.m.22 views

Fedora Update for mupdf FEDORA-2019-15af6a9a07

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.8AI score
Exploits0References2
Fedora
Fedora
added 2019/05/25 3:36 a.m.37 views

[SECURITY] Fedora 29 Update: mupdf-1.15.0-1.fc29

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

5.5CVSS0.6AI score0.01571EPSS
Exploits4
Fedora
Fedora
added 2019/05/22 1:41 a.m.39 views

[SECURITY] Fedora 30 Update: mupdf-1.15.0-1.fc30

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

5.5CVSS0.6AI score0.01571EPSS
Exploits4
Rows per page
Query Builder