Lucene search
+L

1585 matches found

NVD
NVD
•added 2020/12/09 9:15 p.m.•37 views

CVE-2020-16600

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

7.8CVSS7.5AI score0.00962EPSS
SaveExploits0References2
Prion
Prion
•added 2020/12/09 9:15 p.m.•27 views

Design/Logic Flaw

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

6.8CVSS7.5AI score0.00962EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2020/12/09 9:15 p.m.•32 views

CVE-2020-16600

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

7.8CVSS7.1AI score0.00962EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2020/12/09 9:15 p.m.•94 views

CVE-2020-16600

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

7.8CVSS3.1AI score0.00962EPSS
SaveExploits0
OSV
OSV
•added 2020/12/09 9:15 p.m.•11 views

UBUNTU-CVE-2020-16600

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

7.8CVSS7.1AI score0.00962EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2020/12/09 9:06 p.m.•44 views

CVE-2020-16600

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

7.5AI score0.00962EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2020/12/09 9:06 p.m.•83 views

CVE-2020-16600

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

7.8CVSS7.5AI score0.00962EPSS
SaveExploits0
Mend
Mend
•added 2020/12/09 9:06 p.m.•4 views

CVE-2020-16600

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

8.5CVSS0.00962EPSS
SaveExploits0References5
CVE
CVE
•added 2020/12/09 9:06 p.m.•112 views

CVE-2020-16600

CVE-2020-16600 affects Artifex MuPDF (library 1.17.0-rc1 and earlier). The flaw is a use-after-free caused when a valid page is followed by a page with invalid pixmap dimensions, making bander – a static – point to freed memory instead of a newband_writer. It has been addressed in OpenSUSE/OpenSU...

7.8CVSS7.4AI score0.00962EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2020/12/09 12:00 a.m.•26 views

Artifex Software MuPDF Resource Management Error Vulnerability

Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A resource management error vulnerability exists in Artifex Software MuPDF library 1.17.0-rc1 and earlier versions, which stems from when a valid page is followed by an invalid pixmap-sized page, resulting in the...

7.8CVSS7.1AI score0.00962EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/12/09 12:00 a.m.•18 views

PT-2020-14873 · Artifex +2 · Mupdf Library +2

Name of the Vulnerable Software and Affected Versions: Artifex Software, Inc. MuPDF library versions 1.17.0-rc1 and earlier Description: A Use After Free issue exists when a valid page is followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed...

7.8CVSS6.2AI score0.15181EPSS
SaveExploits8References44
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/09 12:00 a.m.•4 views

CVE-2020-16600: Use After Free

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

7.8CVSS7AI score0.00962EPSS
SaveExploits0References2
Veracode
Veracode
•added 2020/12/06 4:35 a.m.•27 views

Denial Of Service (DoS)

mupdf is vulnerable to denial of service. A NULL pointer dereference in the pdfrunxobject function in pdf-op-run.c during a Fitz fzpaintpixmapwithmask painting operation allows an attacker to crash the application...

7.5CVSS3.6AI score0.15181EPSS
SaveExploits3References8Affected Software1
Veracode
Veracode
•added 2020/12/06 4:31 a.m.•36 views

Segmentation Fault

MuPDF is vulnerable to Segmentation fault. The vulnerability existed because of a page-number mishandling in cbz/mucbz.c, cbz/muimg.c, and svg/svg-doc.c...

5.5CVSS2AI score0.01556EPSS
SaveExploits1References10Affected Software1
Veracode
Veracode
•added 2020/12/06 4:18 a.m.•32 views

Buffer Overflow

MuPDF is vulnerable to buffer overflow. This vulnerability allow attackers to execute arbitrary code via a crafted PDF file. This occurs with a large BDC property name that overflows the allocated size of a display list node...

7.8CVSS7.4AI score0.03032EPSS
SaveExploits1References11Affected Software1
Veracode
Veracode
•added 2020/12/06 3:28 a.m.•31 views

Denial Of Service (DoS)

MuPDF is vulnerable to denial of service. The vulnerability allows remote attackers to cause a denial of service via a crafted pdf file...

5.5CVSS5.1AI score0.0147EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
•added 2020/12/06 3:28 a.m.•30 views

Denial Of Service (DoS)

mupdf is vulnerable to denial of service. The fzappendbyte function in fitz/buffer.c due to an array-index underflow allows remote attackers to cause a denial of service through a segmentation fault via a malicious pdf file...

5.5CVSS5.4AI score0.0147EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
•added 2020/12/06 3:04 a.m.•27 views

Denial Of Service (DoS)

mupdf is vulnerable to denial of service DoS. The vulnerability exists due to out-of-bounds read in fzrunt3glyph in fitz/font.c, allowing a malicious user to crash the application...

5.5CVSS3AI score0.01607EPSS
SaveExploits1References6Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2020/11/27 1:43 p.m.•6 views

mupdf:pdf_fuzzer: Use-of-uninitialized-value in template_span_with_mask_3_general

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5371256857427968 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

5.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2020/11/23 12:00 a.m.•39 views

Debian DSA-4794-1 : mupdf - security update

A heap-based buffer overflow flaw was discovered in MuPDF, a lightweight PDF viewer, which may result in denial of service or the execution of arbitrary code if malformed documents are opened. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

5.5CVSS7.1AI score0.01031EPSS
SaveExploits0References5
Rows per page
Query Builder