Lucene search
+L

1368 matches found

Prion
Prion
added 2020/12/09 9:15 p.m.24 views

Design/Logic Flaw

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

6.8CVSS7.5AI score0.00962EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/12/09 9:15 p.m.8 views

UBUNTU-CVE-2020-16600

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

7.8CVSS7.1AI score0.00962EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2020/12/09 9:06 p.m.40 views

CVE-2020-16600

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

7.5AI score0.00962EPSS
SaveExploits0References2
CVE
CVE
added 2020/12/09 9:06 p.m.106 views

CVE-2020-16600

CVE-2020-16600 affects Artifex MuPDF (library 1.17.0-rc1 and earlier). The flaw is a use-after-free caused when a valid page is followed by a page with invalid pixmap dimensions, making bander – a static – point to freed memory instead of a newband_writer. It has been addressed in OpenSUSE/OpenSU...

7.8CVSS7.4AI score0.00962EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2020/12/09 9:06 p.m.80 views

CVE-2020-16600

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

7.8CVSS7.5AI score0.00962EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2020/12/09 12:00 a.m.11 views

PT-2020-14873 · Artifex +2 · Mupdf Library +2

Name of the Vulnerable Software and Affected Versions: Artifex Software, Inc. MuPDF library versions 1.17.0-rc1 and earlier Description: A Use After Free issue exists when a valid page is followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed...

7.8CVSS6.2AI score0.15181EPSS
SaveExploits8References44
CNNVD
CNNVD
added 2020/12/09 12:00 a.m.15 views

Artifex Software MuPDF Resource Management Error Vulnerability

Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A resource management error vulnerability exists in Artifex Software MuPDF library 1.17.0-rc1 and earlier versions, which stems from when a valid page is followed by an invalid pixmap-sized page, resulting in the...

7.8CVSS7.1AI score0.00962EPSS
SaveExploits0References4
Veracode
Veracode
added 2020/12/06 4:35 a.m.27 views

Denial Of Service (DoS)

mupdf is vulnerable to denial of service. A NULL pointer dereference in the pdfrunxobject function in pdf-op-run.c during a Fitz fzpaintpixmapwithmask painting operation allows an attacker to crash the application...

7.5CVSS3.6AI score0.15181EPSS
SaveExploits3References8Affected Software1
Veracode
Veracode
added 2020/12/06 4:31 a.m.36 views

Segmentation Fault

MuPDF is vulnerable to Segmentation fault. The vulnerability existed because of a page-number mishandling in cbz/mucbz.c, cbz/muimg.c, and svg/svg-doc.c...

5.5CVSS2AI score0.01556EPSS
SaveExploits1References10Affected Software1
Veracode
Veracode
added 2020/12/06 4:18 a.m.30 views

Buffer Overflow

MuPDF is vulnerable to buffer overflow. This vulnerability allow attackers to execute arbitrary code via a crafted PDF file. This occurs with a large BDC property name that overflows the allocated size of a display list node...

7.8CVSS7.4AI score0.03032EPSS
SaveExploits1References11Affected Software1
Veracode
Veracode
added 2020/12/06 3:28 a.m.30 views

Denial Of Service (DoS)

MuPDF is vulnerable to denial of service. The vulnerability allows remote attackers to cause a denial of service via a crafted pdf file...

5.5CVSS5.1AI score0.0147EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
added 2020/12/06 3:28 a.m.30 views

Denial Of Service (DoS)

mupdf is vulnerable to denial of service. The fzappendbyte function in fitz/buffer.c due to an array-index underflow allows remote attackers to cause a denial of service through a segmentation fault via a malicious pdf file...

5.5CVSS5.4AI score0.0147EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
added 2020/12/06 3:04 a.m.26 views

Denial Of Service (DoS)

mupdf is vulnerable to denial of service DoS. The vulnerability exists due to out-of-bounds read in fzrunt3glyph in fitz/font.c, allowing a malicious user to crash the application...

5.5CVSS3AI score0.01607EPSS
SaveExploits1References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/11/23 12:00 a.m.36 views

Debian DSA-4794-1 : mupdf - security update

A heap-based buffer overflow flaw was discovered in MuPDF, a lightweight PDF viewer, which may result in denial of service or the execution of arbitrary code if malformed documents are opened. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

5.5CVSS7.1AI score0.01031EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2020/11/22 12:00 a.m.19 views

Debian: Security Advisory (DSA-4794-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.5AI score0.01031EPSS
SaveExploits0References4
Debian
Debian
added 2020/11/21 1:37 p.m.124 views

[SECURITY] [DSA 4794-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4794-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 21, 2020 https://www.debian.org/security/faq -...

5.5CVSS5.8AI score0.01031EPSS
SaveExploits0
Debian
Debian
added 2020/11/21 1:37 p.m.129 views

[SECURITY] [DSA 4794-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4794-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 21, 2020 https://www.debian.org/security/faq -...

4.3CVSS2.5AI score0.01031EPSS
SaveExploits0
OSV
OSV
added 2020/11/21 12:00 a.m.24 views

DSA-4794-1 mupdf - security update

Bulletin has no description...

5.5CVSS5.3AI score0.01031EPSS
SaveExploits0
Veracode
Veracode
added 2020/10/29 9:11 p.m.29 views

Buffer Over-Write

Artifex MuPDF is vulnerable to buffer over-write. It happens when parsing JBIG2 files allowing attackers to cause a denial of service...

5.5CVSS4.7AI score0.01031EPSS
SaveExploits0References10Affected Software1
OSS-Fuzz
OSS-Fuzz
added 2020/10/28 11:02 a.m.40 views

mupdf:pdf_fuzzer: Crash in template_affine_N_near_fb0

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=4867473373134848 Project: mupdf Fuzzing Engine: honggfuzz Fuzz Target: pdffuzzer Job Type: honggfuzzasanmupdf Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7ff23addb19e Crash State:...

6.8AI score
SaveExploits0Affected Software1
Rows per page
Query Builder