1361 matches found
CVE-2018-19881
In Artifex MuPDF 1.14.0, svg/svg-run.c allows remote attackers to cause a denial of service recursive calls followed by a fitz/xml.c fzxmlatt crash from excessive stack consumption via a crafted svg file, as demonstrated by mupdf-gl...
Artifex MuPDF Denial of Service Vulnerability (CNVD-2019-06786)
Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. A denial of service vulnerability exists in the 'svgrunimage' function of the svg/svg-run.c file in Artifex MuPDF version 1.14.0. A remote attacker can exploit this vulnerability to cause a denial of service hrefatt null point...
PT-2018-15136 · Artifex · Mupdf
Name of the Vulnerable Software and Affected Versions: Artifex MuPDF version 1.14.0 Description: The issue allows remote attackers to cause a denial of service through recursive calls followed by a crash from excessive stack consumption via a crafted svg file. This is demonstrated by mupdf-gl...
PT-2018-15137 · Artifex · Artifex Mupdf
Name of the Vulnerable Software and Affected Versions: Artifex MuPDF version 1.14.0 Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a crafted svg file. This is due to a NULL pointer dereference in the svg run image function...
CVE-2018-19881
In Artifex MuPDF 1.14.0, svg/svg-run.c allows remote attackers to cause a denial of service recursive calls followed by a fitz/xml.c fzxmlatt crash from excessive stack consumption via a crafted svg file, as demonstrated by mupdf-gl...
CVE-2018-19881
In Artifex MuPDF 1.14.0, svg/svg-run.c allows remote attackers to cause a denial of service recursive calls followed by a fitz/xml.c fzxmlatt crash from excessive stack consumption via a crafted svg file, as demonstrated by mupdf-gl...
CVE-2018-19882
In Artifex MuPDF 1.14.0, the svgrunimage function in svg/svg-run.c allows remote attackers to cause a denial of service hrefatt NULL pointer dereference and application crash via a crafted svg file, as demonstrated by mupdf-gl...
CVE-2018-19881
CVE-2018-19881 affects Artifex MuPDF 1.14.0. The issue resides in svg/svg-run.c where processing a crafted SVG can trigger recursive calls, leading to a fitz/xml.c fz_xml_att crash from stack overconsumption and causing a denial of service. Demonstrated by mupdf-gl. Fedora advisories indicate a r...
CVE-2018-19882
In Artifex MuPDF 1.14.0, the svgrunimage function in svg/svg-run.c allows remote attackers to cause a denial of service hrefatt NULL pointer dereference and application crash via a crafted svg file, as demonstrated by mupdf-gl...
CVE-2018-19882
CVE-2018-19882 affects MuPDF 1.14.0: the svg_run_image function in svg/svg-run.c allows a crafted SVG file to trigger a denial of service (href_att NULL pointer dereference and application crash), demonstrated by mupdf-gl. The vulnerability arises from the SVG handling path in MuPDF’s rendering c...
Denial Of Service (DoS)
MuPDF is vulnerable to denial of service. An infinite loop in the function svgdevendtile in fitz/svg-device.c allows an attacker to cause a denial of service condition...
Design/Logic Flaw
In Artifex MuPDF 1.14.0, there is an infinite loop in the function svgdevendtile in fitz/svg-device.c, as demonstrated by mutool...
CVE-2018-19777
In Artifex MuPDF 1.14.0, there is an infinite loop in the function svgdevendtile in fitz/svg-device.c, as demonstrated by mutool...
UBUNTU-CVE-2018-19777
In Artifex MuPDF 1.14.0, there is an infinite loop in the function svgdevendtile in fitz/svg-device.c, as demonstrated by mutool...
CVE-2018-19777
In Artifex MuPDF 1.14.0, there is an infinite loop in the function svgdevendtile in fitz/svg-device.c, as demonstrated by mutool...
DEBIAN-CVE-2018-19777
In Artifex MuPDF 1.14.0, there is an infinite loop in the function svgdevendtile in fitz/svg-device.c, as demonstrated by mutool...
CVE-2018-19777
In Artifex MuPDF 1.14.0, there is an infinite loop in the function svgdevendtile in fitz/svg-device.c, as demonstrated by mutool...
CVE-2018-19777
CVE-2018-19777 affects Artifex MuPDF 1.14.0, where an infinite loop in the function svg_dev_end_tile (fitz/svg-device.c) can be demonstrated by mutool. The connected sources confirm the vulnerable component and code path but do not provide detailed exploitation conditions beyond the loop example....