CVE-2017-5896

Heap-based buffer overflow in the fzsubsamplepixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted image...

CVE-2017-5991

An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdfrunxobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fzpaintpixmapwithmask painting operation. Versions 1.11 and later are unaffected...

CVE-2017-5991

An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdfrunxobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fzpaintpixmapwithmask painting operation. Versions 1.11 and later are unaffected...

Null pointer dereference

An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdfrunxobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fzpaintpixmapwithmask painting operation. Versions 1.11 and later are unaffected...

UBUNTU-CVE-2017-5991

An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdfrunxobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fzpaintpixmapwithmask painting operation. Versions 1.11 and later are unaffected...

CVE-2017-5991

An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdfrunxobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fzpaintpixmapwithmask painting operation. Versions 1.11 and later are unaffected...

DEBIAN-CVE-2017-5991

An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdfrunxobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fzpaintpixmapwithmask painting operation. Versions 1.11 and later are unaffected...

CVE-2017-5991

An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdfrunxobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fzpaintpixmapwithmask painting operation. Versions 1.11 and later are unaffected...

CVE-2017-5991

MuPDF vulnerability CVE-2017-5991 is a NULL pointer dereference in pdf_run_xobject (pdf-op-run.c) during Fitz fz_paint_pixmap_with_mask, affecting MuPDF up to the 1912de5f… commit. The issue is exploitable via parsing crafted PDFs and affects versions prior to 1.12+? (per the note “Versions 1.11 ...

CVE-2017-5991

An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdfrunxobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fzpaintpixmapwithmask painting operation. Versions 1.11 and later are unaffected...

CVE-2017-5991

An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdfrunxobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fzpaintpixmapwithmask painting operation. Versions 1.11 and later are unaffected...

PT-2017-16811 · Artifex +1 · Mupdf +1

Name of the Vulnerable Software and Affected Versions: Artifex MuPDF versions prior to 1912de5f08e90af1d9d0a9791f58ba3afdb9d465 Artifex MuPDF versions prior to 1.11 Description: An issue was discovered in the pdf run xobject function in pdf-op-run.c, which encounters a NULL pointer dereference...

MuPDF 'fitz/pixmap.c' Heap Buffer Overflow Vulnerability

Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A heap buffer overflow vulnerability exists in MuPDF. An attacker could exploit the vulnerability to execute arbitrary code or cause a denial of service in an affected application environment...

openSUSE Security Update : mupdf (openSUSE-2017-197)

This update for mupdf to version 1.10a fixes the following issues : These security issues were fixed : - CVE-2016-10132: NULL pointer dereference in regexp because of a missing check after allocating memory allowing for DoS bsc1019877. - CVE-2016-10133: Heap buffer overflow write in jsstackoverfl...

openSUSE Security Update : mupdf (openSUSE-2017-196)

This update for mupdf to version 1.10a fixes the following issues : These security issues were fixed : - CVE-2016-10132: NULL pointer dereference in regexp because of a missing check after allocating memory allowing for DoS bsc1019877. - CVE-2016-10133: Heap buffer overflow write in jsstackoverfl...

Use-After-Free Vulnerability Leading To Denial Of Service (DoS)

MuPDF is vulnerable to a use-after-free vulnerability. This vulnerability is located in the pdfloadxref function and allows remote attackers to perform denial of service DoS attacks using a PDF file...

Denial Of Service (DoS) Or Arbitrary Code Execution

MuPDF is vulnerable to denial of service DoS attacks that could possibly lead to arbitrary code execution. These attacks are possible because there is a heap-based buffer overflow in the pdfloadmeshparams function...

Fedora Update for zathura-pdf-mupdf FEDORA-2016-8d73759936

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for zathura-pdf-mupdf FEDORA-2016-4cf3e3f488

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 23 : mujs / zathura-pdf-mupdf (2016-2edfd75312)

Security fix for CVE-2016-7504, CVE-2016-7505, CVE-2016-7506, CVE-2016-9017, CVE-2016-9108, CVE-2016-9109, CVE-2016-9294 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean an...