CVE-2016-6265

Use-after-free vulnerability in the pdfloadxref function in pdf/pdf-xref.c in MuPDF allows remote attackers to cause a denial of service crash via a crafted PDF file...

CVE-2016-6525

Heap-based buffer overflow in the pdfloadmeshparams function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service crash or execute arbitrary code via a large decode array...

CVE-2016-6525

MuPDF is affected by CVE-2016-6525 due to a heap overflow in pdf_load_mesh_params inside pdf/pdf-shade.c. A large decode array can trigger an out-of-bounds write, leading to a crash or arbitrary code execution. Public reports and advisories (Debian DSA-3655-1; Mageia MGASA-2016-0286; Gentoo GLSA ...

CVE-2016-6525

Heap-based buffer overflow in the pdfloadmeshparams function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service crash or execute arbitrary code via a large decode array...

CVE-2016-6265

Use-after-free vulnerability in the pdfloadxref function in pdf/pdf-xref.c in MuPDF allows remote attackers to cause a denial of service crash via a crafted PDF file...

CVE-2016-6525

Heap-based buffer overflow in the pdfloadmeshparams function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service crash or execute arbitrary code via a large decode array...

CVE-2016-6265

Use-after-free vulnerability in the pdfloadxref function in pdf/pdf-xref.c in MuPDF allows remote attackers to cause a denial of service crash via a crafted PDF file...

CVE-2016-6265

MuPDF contains a use-after-free in pdf_load_xref.c (pdf/pdf-xref.c) that can be triggered by a crafted PDF, enabling a remote attacker to crash the process (DoS). Public reports indicate this affects MuPDF and prompted security advisories; Debian notes CVE-2016-6265 along with CVE-2016-6525 and p...

CVE-2016-6525: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the pdfloadmeshparams function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service crash or execute arbitrary code via a large decode array...

CVE-2016-6265: Use After Free

Use-after-free vulnerability in the pdfloadxref function in pdf/pdf-xref.c in MuPDF allows remote attackers to cause a denial of service crash via a crafted PDF file...

Updated mupdf packages fix security vulnerability

A flaw was discovered in the pdfloadmeshparams function allowing out-of-bounds write access to memory locations. With carefully crafted input, that could trigger a heap overflow, resulting in application crash or possibly having other unspecified impact CVE-2016-6525. Also, mupdf already containe...

MGASA-2016-0286 Updated mupdf packages fix security vulnerability

A flaw was discovered in the pdfloadmeshparams function allowing out-of-bounds write access to memory locations. With carefully crafted input, that could trigger a heap overflow, resulting in application crash or possibly having other unspecified impact CVE-2016-6525. Also, mupdf already containe...

mupdf: arbitrary code execution

Marco Grassi discovered a use-after-free vulnerability in MuPDF. An attacker can take advantage of this flaw to cause an application crash denial-of-service, or potentially to execute arbitrary code with the privileges of the user running MuPDF, if a specially crafted PDF file is processed...

mupdf: arbitrary code execution

Yu Hong and Zheng Jihong discovered a heap overflow vulnerability within the pdfloadmeshparams function, allowing an attacker to cause an application crash denial-of-service, or potentially to execute arbitrary code with the privileges of the user running MuPDF, if a specially crafted PDF file is...

Debian DSA-3655-1 : mupdf - security update

Two vulnerabilities were discovered in MuPDF, a lightweight PDF viewer. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2016-6265 Marco Grassi discovered a use-after-free vulnerability in MuPDF. An attacker can take advantage of this flaw to cause an...

mupdf -- multiple vulnerabilities

Tobias Kortkamp reports: Heap-based buffer overflow in the pdfloadmeshparams function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service crash or execute arbitrary code via a large decode array. Use-after-free vulnerability in the pdfloadxref function in pdf/pdf-xref...

[SECURITY] [DSA 3655-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3655-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 26, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3655-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3655-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 26, 2016 https://www.debian.org/security/faq -...

DSA-3655-1 mupdf - security update

Bulletin has no description...

PT-2016-6973

Name of the Vulnerable Software and Affected Versions MuPDF affected versions not specified Description The issue is related to a heap-based buffer overflow in the pdf load mesh params function, which can be triggered by a large decode array. This can cause a denial of service crash or potentiall...