Debian DSA-4334-1 : mupdf - security update

Multiple vulnerabilities were discovered in MuPDF, a PDF, XPS, and e-book viewer which could result in denial of service or the execution of arbitrary code if malformed documents are opened. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

[SECURITY] [DSA 4334-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4334-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 04, 2018 https://www.debian.org/security/faq -...

openSUSE Security Update : mupdf (openSUSE-2018-89)

This update for mupdf to version 1.12.0 fixes several issues. These security issues were fixed : - CVE-2018-5686: Prevent infinite loop in pdfparsearray function because EOF is not considered. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file...

Fedora 26 : mupdf (2017-d1213cef30)

rebase to 1.12 CVE-2017-17866 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

Fedora 27 : mupdf (2017-4c30d86843)

rebase to 1.12 CVE-2017-17866 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

CVE-2017-17866

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

CVE-2017-17866

CVE-2017-17866 affects MuPDF prior to 1.12.0. The issue: MuPDF’s pdf-write.c mishandles certain length changes during a repair operation in a clean cycle, enabling a denial of service via a buffer overflow when processing crafted PDFs. Multiple connected sources (Debian DSA-4334-1, openSUSE openS...