Lucene search
+L

1371 matches found

Cvelist
Cvelist
added 2018/01/14 2:00 a.m.40 views

CVE-2018-5686

In MuPDF 1.12.0, there is an infinite loop vulnerability and application hang in the pdfparsearray function pdf/pdf-parse.c because EOF is not considered. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file...

5.3AI score0.01472EPSS
SaveExploits1References5
AlpineLinux
AlpineLinux
added 2018/01/14 2:00 a.m.98 views

CVE-2018-5686

In MuPDF 1.12.0, there is an infinite loop vulnerability and application hang in the pdfparsearray function pdf/pdf-parse.c because EOF is not considered. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file...

5.5CVSS5.4AI score0.01472EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2018/01/14 12:00 a.m.9 views

PT-2018-17083 · Artifex · Mupdf

Name of the Vulnerable Software and Affected Versions: MuPDF version 1.12.0 Description: The issue is related to an infinite loop vulnerability and application hang in the pdf parse array function, located in pdf/pdf-parse.c, due to the failure to consider the End Of File EOF. This allows remote...

9.8CVSS6.4AI score0.03645EPSS
SaveExploits15References58
Fedora
Fedora
added 2018/01/10 2:15 a.m.32 views

[SECURITY] Fedora 27 Update: mupdf-1.12.0-1.fc27

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

7.8CVSS0.6AI score0.01579EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2018/01/10 12:00 a.m.26 views

Fedora Update for mupdf FEDORA-2017-4c30d86843

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.4AI score0.01579EPSS
SaveExploits0References2
Mageia
Mageia
added 2017/12/31 12:00 p.m.62 views

Updated mupdf packages fix security vulnerability

Multiple vulnerabilities have been found in the PDF viewer MuPDF, which may result in denial of service or the execution of arbitrary code if a malformed PDF file is opened CVE-2016-8674, CVE-2017-5896, CVE-2017-5991 Terry Chia and Jeremy Heng discovered an integer overflow that can cause arbitra...

7.8CVSS3.1AI score0.15181EPSS
SaveExploits3References3
OSV
OSV
added 2017/12/31 12:00 p.m.16 views

MGASA-2017-0479 Updated mupdf packages fix security vulnerability

Multiple vulnerabilities have been found in the PDF viewer MuPDF, which may result in denial of service or the execution of arbitrary code if a malformed PDF file is opened CVE-2016-8674, CVE-2017-5896, CVE-2017-5991 Terry Chia and Jeremy Heng discovered an integer overflow that can cause arbitra...

7.8CVSS7.3AI score0.15181EPSS
SaveExploits3References4
Veracode
Veracode
added 2017/12/27 10:59 p.m.27 views

Denial Of Service (DoS)

MuPDF is vulnerable to denial of service DoS attacks. These attacks are possible when a repair operation occurs during a clean operation because MuPDF incorrectly handles length changes...

7.8CVSS7.1AI score0.01579EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2017/12/27 5:08 p.m.33 views

CVE-2017-17866

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

7.8CVSS8.4AI score
SaveExploits0References3
OSV
OSV
added 2017/12/27 5:08 p.m.5 views

DEBIAN-CVE-2017-17866

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

7.8CVSS8AI score0.01579EPSS
SaveExploits0References1
NVD
NVD
added 2017/12/27 5:08 p.m.22 views

CVE-2017-17866

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

7.8CVSS7AI score0.01579EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2017/12/27 5:08 p.m.33 views

CVE-2017-17866

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

7.8CVSS7.2AI score0.01579EPSS
SaveExploits0References4
Prion
Prion
added 2017/12/27 5:08 p.m.26 views

Buffer overflow

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

6.8CVSS8AI score0.01579EPSS
SaveExploits0References3Affected Software2
CNVD
CNVD
added 2017/12/25 12:00 a.m.11 views

Artifex MuPDF pdf/pdf-write.c File Denial of Service Vulnerability

Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. A security vulnerability exists in the pdf/pdf-write.c file in Artifex MuPDF versions prior to 1.12.0, which stems from the program's failure to properly handle length variations. A remote attacker can exploit this vulnerabili...

7.8CVSS7AI score0.01579EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2017/12/23 5:00 p.m.35 views

CVE-2017-17866

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

6.9AI score0.01579EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2017/12/23 5:00 p.m.55 views

CVE-2017-17866

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

7.8CVSS8.1AI score0.01579EPSS
SaveExploits0
CVE
CVE
added 2017/12/23 5:00 p.m.92 views

CVE-2017-17866

CVE-2017-17866 affects MuPDF prior to 1.12.0. The issue: MuPDF’s pdf-write.c mishandles certain length changes during a repair operation in a clean cycle, enabling a denial of service via a buffer overflow when processing crafted PDFs. Multiple connected sources (Debian DSA-4334-1, openSUSE openS...

7.8CVSS6.8AI score0.01579EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
added 2017/12/12 2:14 a.m.32 views

Denial Of Service (DoS)

MuPDF is vulnerable to denial of service DoS attacks. The library can have a variable reside in a register, causing a use-after-free bug that can crash the application or other impacts through a malicious pdf file...

7.8CVSS7.2AI score0.01284EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2017/12/11 12:00 a.m.34 views

Fedora Update for mupdf FEDORA-2017-9ae6e39bde

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.5AI score0.03452EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
added 2017/12/11 12:00 a.m.47 views

Fedora 25 : mupdf (2017-9ae6e39bde)

CVE-2017-15369 CVE-2017-15587 CVE-2017-9216 CVE-2017-14685 CVE-2017-14686 CVE-2017-14687 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

7.8CVSS6.3AI score0.03452EPSS
SaveExploits4References7
Rows per page
Query Builder