CVE-2017-17866

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

CVE-2017-17866

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

PT-2017-15056

Name of the Vulnerable Software and Affected Versions Artifex MuPDF versions prior to 1.12.0 Description The issue arises from the mishandling of certain length changes during a repair operation that occurs simultaneously with a clean operation in pdf/pdf-write.c. This can be exploited by remote...

Denial Of Service (DoS)

MuPDF is vulnerable to denial of service DoS attacks. The library can have a variable reside in a register, causing a use-after-free bug that can crash the application or other impacts through a malicious pdf file...

Fedora Update for mupdf FEDORA-2017-9ae6e39bde

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 25 : mupdf (2017-9ae6e39bde)

CVE-2017-15369 CVE-2017-15587 CVE-2017-9216 CVE-2017-14685 CVE-2017-14686 CVE-2017-14687 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

[SECURITY] Fedora 25 Update: mupdf-1.11-9.fc25

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

Fedora Update for mupdf FEDORA-2017-a1ad512b22

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for mupdf FEDORA-2017-267f37c544

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 26 : mupdf (2017-267f37c544)

CVE-2017-15369 CVE-2017-15587 CVE-2017-9216 CVE-2017-14685 CVE-2017-14686 CVE-2017-14687 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

[SECURITY] Fedora 26 Update: mupdf-1.11-9.fc26

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

[SECURITY] Fedora 27 Update: mupdf-1.11-9.fc27

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

openSUSE Security Update : mupdf (openSUSE-2017-1300)

This update for mupdf fixes the following issues : Security issues fixed : - CVE-2017-7976: integer overflow jbig2imagecompose function in jbig2image.c during operations on a crafted .jb2 file boo1052029. - CVE-2016-10221: countentries in pdf-layer.c allows for DoS boo1032140. - CVE-2016-8728: Fi...

[ASA-201711-28] jbig2dec: denial of service

Arch Linux Security Advisory ASA-201711-28 ========================================== Severity: Medium Date : 2017-11-22 CVE-ID : CVE-2017-9216 Package : jbig2dec Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-517 Summary ======= The package jbig2dec before versio...

Integer Overflow

MuPDF is vulnerable to integer overflows. An attacker can pass a malicious pdf file to the pdfreadnewxrefsection function in pdf/pdf-xref.c, causing an integer overflow in the application that can lead to arbitrary writes and the application crashing...

Denial Of Service (DoS)

MuPDF is vulnerable to denial of service DoS attacks. The attack can be launched if a malicious file is passed to the fzsubsamplepixmap function in fitz/pixmap.c, causing an out-of-bound read and application crash...

Denial Of Service (DoS)

MuPDF is vulnerable to denial of service DoS attacks and possibly other attacks. These attacks are possible due to a use-after-free vulnerability in the fzsubsamplepixmap function causing the application to crash...

Denial Of Service (DoS)

MuPDF is vulnerable to denial of service DoS attacks. The attack can be launched if a malicious file is passed to the mygetline function in jstestmain.c, causing out-of-bounds write...

Denial Of Service (DoS)

MuPDF is vulnerable to denial of service DoS attacks. Using a PDF document, attackers can use the countentries function to consume the stack and crash the application...

Denial Of Service (DoS)

MuPDF is vulnerable to denial of service DoS attacks and possibly other attacks. This vulnerability is possible because the xpsloadlinksinglyphs function doesn't verify if a font can be loaded before trying to load it. This can be triggered using a .xps file...