[SECURITY] [DSA 4006-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4006-1 [email protected] https://www.debian.org/security/ October 24, 2017 https://www.debian.org/security/faq - -------------------------------------------------------------------------...

DSA-4006-1 mupdf - security update

Bulletin has no description...

Debian: Security Advisory (DSA-4006-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Integer overflow

An integer overflow was discovered in pdfreadnewxrefsection in pdf/pdf-xref.c in Artifex MuPDF 1.11...

CVE-2017-15587

An integer overflow was discovered in pdfreadnewxrefsection in pdf/pdf-xref.c in Artifex MuPDF 1.11...

DEBIAN-CVE-2017-15587

An integer overflow was discovered in pdfreadnewxrefsection in pdf/pdf-xref.c in Artifex MuPDF 1.11...

CVE-2017-15587

An integer overflow was discovered in pdfreadnewxrefsection in pdf/pdf-xref.c in Artifex MuPDF 1.11...

CVE-2017-15587

An integer overflow was discovered in pdfreadnewxrefsection in pdf/pdf-xref.c in Artifex MuPDF 1.11...

CVE-2017-15587

CVE-2017-15587 affects MuPDF 1.11, where an integer overflow was discovered in pdf_read_new_xref_section (pdf/pdf-xref.c). This can lead to DoS or crash scenarios. Affected users are advised to upgrade MuPDF to a non-vulnerable version; openSUSE advisory notes the fix in MuPDF 1.12.0 and lists CV...

CVE-2017-15587

An integer overflow was discovered in pdfreadnewxrefsection in pdf/pdf-xref.c in Artifex MuPDF 1.11...

PT-2017-14115 · Artifex · Mupdf

Name of the Vulnerable Software and Affected Versions: Artifex MuPDF version 1.11 Description: An integer overflow was discovered in the pdf read new xref section function in pdf/pdf-xref.c. This issue affects the processing of PDF files. Recommendations: For Artifex MuPDF version 1.11, consider...

CVE-2017-15369

The buildfilterchain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles a certain case where a variable may reside in a register, which allows remote attackers to cause a denial of service Fitz fzdropimp use-after-free and application crash or possibly have unspecified oth...

CVE-2017-15369

The buildfilterchain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles a certain case where a variable may reside in a register, which allows remote attackers to cause a denial of service Fitz fzdropimp use-after-free and application crash or possibly have unspecified oth...

Design/Logic Flaw

The buildfilterchain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles a certain case where a variable may reside in a register, which allows remote attackers to cause a denial of service Fitz fzdropimp use-after-free and application crash or possibly have unspecified oth...

CVE-2017-15369

The buildfilterchain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles a certain case where a variable may reside in a register, which allows remote attackers to cause a denial of service Fitz fzdropimp use-after-free and application crash or possibly have unspecified oth...

CVE-2017-15369

CVE-2017-15369 affects MuPDF’s pdf-stream handling: in build_filter_chain, a variable might reside in a register, enabling a crafted PDF to trigger a use-after-free in Fitz (fz_drop_imp) and crash the application (possible DoS). Public details come from the NVD description and downstream advisori...

CVE-2017-15369

The buildfilterchain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles a certain case where a variable may reside in a register, which allows remote attackers to cause a denial of service Fitz fzdropimp use-after-free and application crash or possibly have unspecified oth...

CVE-2017-15369

The buildfilterchain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles a certain case where a variable may reside in a register, which allows remote attackers to cause a denial of service Fitz fzdropimp use-after-free and application crash or possibly have unspecified oth...

Artifex MuPDF Denial of Service Vulnerability (CNVD-2017-32250)

Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. A security vulnerability exists in the 'buildfilterchain' function of the pdf/pdf-stream.c file in versions of Artifex MuPDF prior to 2017-09-25. A remote attacker can exploit this vulnerability with a specially crafted PDF...

Artifex MuPDF Denial of Service Vulnerability (CNVD-2017-35030)

Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. A security vulnerability exists in Artifex MuPDF version 1.11. The vulnerability can be exploited to execute arbitrary code or cause a denial of service with the help of a specially crafted .xps file...