openSUSE Security Update : mupdf (openSUSE-2018-149)

This update for mupdf fixes several issues. These security issues were fixed : - CVE-2018-6187: Prevent heap-based buffer overflow in the dopdfsavedocument function. Remote attackers could leverage the vulnerability to cause a denial of service via a crafted pdf file bsc1077407. - CVE-2018-6544:...

CVE-2018-6544

pdfloadobjstm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error stack, which allows remote attackers to cause a denial of service via a crafted PDF document...

CVE-2018-6544

pdfloadobjstm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error stack, which allows remote attackers to cause a denial of service via a crafted PDF document...

PT-2018-17624

Name of the Vulnerable Software and Affected Versions Artifex MuPDF version 1.12.0 Description The issue allows remote attackers to cause a denial of service via a crafted PDF document. This is due to the pdf load obj stm function in pdf/pdf-xref.c referencing the object stream recursively, which...

CVE-2018-6462

Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead of 8 bpc, which might allow remote attackers to execute arbitrary code via a crafted PDF document...

PT-2018-17560

Name of the Vulnerable Software and Affected Versions PDF-XChange Viewer and Viewer AX SDK versions prior to 2.5.322.8 Description The issue arises from the mishandling of conversion from YCC to RGB color spaces, where calculations are based on 1 bit per component bpc instead of 8 bpc. This could...

[ASA-201801-30] mupdf-tools: arbitrary code execution

Arch Linux Security Advisory ASA-201801-30 ========================================== Severity: High Date : 2018-01-30 CVE-ID : CVE-2017-17858 Package : mupdf-tools Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-599 Summary ======= The package mupdf-tools...

[ASA-201801-31] zathura-pdf-mupdf: arbitrary code execution

Arch Linux Security Advisory ASA-201801-31 ========================================== Severity: High Date : 2018-01-30 CVE-ID : CVE-2017-17858 Package : zathura-pdf-mupdf Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-600 Summary ======= The package...

[ASA-201801-28] mupdf-gl: arbitrary code execution

Arch Linux Security Advisory ASA-201801-28 ========================================== Severity: High Date : 2018-01-30 CVE-ID : CVE-2017-17858 Package : mupdf-gl Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-599 Summary ======= The package mupdf-gl before...

Debian: Security Advisory (DLA-874-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated swftools packages fix security vulnerability

A Use After Free in the pdf2swf part of swftools 0.9.2 and earlier allows remote attackers to execute arbitrary code via a malformed PDF document, due to bundled code in Gfx.cc from Xpdf 3.02 CVE-2017-7698...

CVE-2017-17866

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

CVE-2017-17866

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

Buffer overflow

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

CVE-2017-17866

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

CVE-2017-17866: Improper Restriction of Operations within the Bounds of a Memory Buffer

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

CVE-2017-17866

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

CVE-2017-17866

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16370)

An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to computation that reads data that is past the end of the target buffer. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted PDF document...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16414)

An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to computation that reads data that is past the end of the target buffer. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted PDF document...