Debian Security Advisory DSA 3655-1 (mupdf - security update)

Two vulnerabilities were discovered in MuPDF, a lightweight PDF viewer. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-6265 Marco Grassi discovered a use-after-free vulnerability in MuPDF. An attacker can take advantage of this flaw to cause an...

Debian: Security Advisory (DSA-3655-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-589-1 : mupdf security update

A flaw was discovered in the pdfloadmeshparams function allowing out-of-bounds write access to memory locations. With carefully crafted input, that could trigger a heap overflow, resulting in application crash or possibly having other unspecified impact. For Debian 7 'Wheezy', these problems have...

[SECURITY] [DLA 589-1] mupdf security update

Package : mupdf Version : 0.9-2+deb7u3 CVE ID : CVE-2016-6525 Debian Bug : 833417 A flaw was discovered in the pdfloadmeshparams function allowing out-of-bounds write access to memory locations. With carefully crafted input, that could trigger a heap overflow, resulting in application crash or...

DLA-589-1 mupdf - security update

Bulletin has no description...

MuPDF Denial of Service Vulnerability

MuPDF is a PDF format analyzer used to read PDF files and create Fitz tree diagrams. MuPDF suffers from a denial of service vulnerability that can be exploited by an attacker to crash an affected application, resulting in a denial of service...

openSUSE Security Update : mupdf (openSUSE-2016-926)

This update for mupdf fixes the following issues : Security issues fixed : - CVE-2016-6265: Fixed a use-after-free issue boo990195. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

MuPDF Heap Overflow Vulnerability

MuPDF is a lightweight, high quality PDF/XPS/CBZ viewer for Android devices. MuPDF has a heap overflow vulnerability in source/pdf/pdf-shade.c in the pdfloadmeshparams function. Allows an attacker to exploit this vulnerability to take control of memory...

Artifex MuPDF Denial of Service Vulnerability

Artifex MuPDF is a lightweight PDF reader from Artifex Software. A denial of service vulnerability exists in Artifex MuPDF. An attacker can exploit this vulnerability to cause a denial of service...

MGASA-2016-0268 Updated mupdf packages fix security vulnerability

Use-after-free issue in mupdf in pdfloadxref can cause a denial of service CVE-2016-6265...

Updated mupdf packages fix security vulnerability

Use-after-free issue in mupdf in pdfloadxref can cause a denial of service CVE-2016-6265...

PT-2016-6814

Name of the Vulnerable Software and Affected Versions MuPDF affected versions not specified Description The issue is related to a use-after-free vulnerability in the pdf load xref function, which can be exploited by remote attackers using a crafted PDF file, leading to a denial of service crash...

Gentoo Security Advisory GLSA 201412-43

Gentoo Linux Local Security Checks GLSA 201412-43 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the mupdf package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

GLSA-201412-43 : MuPDF: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201412-43 MuPDF: User-assisted execution of arbitrary code Multiple vulnerabilities have been discovered in MuPDF. Please review the CVE identifier and Secunia Research referenced below for details. Impact : A remote attacker coul...

MuPDF: User-assisted execution of arbitrary code

Background MuPDF is a lightweight PDF viewer and toolkit written in portable C. Description Multiple vulnerabilities have been discovered in MuPDF. Please review the CVE identifier and Secunia Research referenced below for details. Impact A remote attacker could entice a user to open a specially...

Fedora Update for mupdf FEDORA-2014-1475

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MuPDF 1.3 - Stack-based Buffer Overflow in xps_parse_color()

No description provided by source. ============================================================= 0day - MuPDF Stack-based Buffer Overflow in xpsparsecolor ============================================================= Date of discovery: 2013-01-26 Software Links: http://www.mupdf.com/ ;...

SumatraPDF 2.1.1/MuPDF 1.0 Integer Overflow

No description provided by source. Sumatra 2.1.1/MuPDF 1.0 Integer Overflow ======================================= There is an integer overflow on the MuPDF in the lexnumber function which can be triggered using a corrupt PDF file with ObjStm. I'm attaching a file that reproduces the problem wit...

openSUSE Security Update : mupdf (openSUSE-SU-2014:0309-1)

mupdf received a security updated to fix a stack based array overflow in xpsparsecolor bnc863975, CVE-2014-2013 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-172. The text...