MuPDF Firefox插件'pdfmoz_onmouse()'函数栈缓冲区溢出漏洞

Bugtraq ID: 47739 MuPDF是一款PDF格式分析器，用来阅读PDF文件，并创建Fitz树状图。并可作为Firefox等浏览器插件使用。 apps/mozilla/mozmain.c提供的"pdfmozonmouse"函数存在边界错误，攻击者恶意WEB页，诱使用户访问可触发基于栈的缓冲区溢出，成功利用漏洞可以以应用程序上下文执行任意代码。 0 Artifex Software MuPDF Firefox Plugin 2008.09.02 目前没有详细解决方案提供： http://www.mupdf.com/plugin/install.html...

FreeBSD : mupdf -- Remote System Access (53bde960-356b-11e0-8e81-0022190034c0)

Secunia reports : The vulnerability is caused due to an error within the 'closedctd' function in fitz/filtdctd.c when processing PDF files containing certain malformed JPEG images. This can be exploited to cause a stack corruption by e.g. tricking a user into opening a specially crafted PDF file...

FreeBSD Ports: mupdf

The remote host is missing an update to the system as announced in the referenced advisory. VID 53bde960-356b-11e0-8e81-0022190034c0 OpenVAS Vulnerability Test $ Description: Auto generated from VID 53bde960-356b-11e0-8e81-0022190034c0 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

FreeBSD Ports: mupdf

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2011-5196 · Artifex +1 · Mupdf +1

Name of the Vulnerable Software and Affected Versions: SumatraPDF version 2.1.1 MuPDF version 1.0 Description: The issue allows remote attackers to cause an integer overflow in the lex number function via a corrupt PDF file. It is also caused by a signedness error in the pdf repair obj stm functi...

mupdf -- Remote System Access

Secunia reports: The vulnerability is caused due to an error within the "closedctd" function in fitz/filtdctd.c when processing PDF files containing certain malformed JPEG images. This can be exploited to cause a stack corruption by e.g. tricking a user into opening a specially crafted PDF file...

Stack overflow

Multiple stack-based buffer overflows in pdfshade4.c in MuPDF before commit 20091125231942, as used in SumatraPDF before 1.0.1, allow remote attackers to cause a denial of service and possibly execute arbitrary code via a /Decode array for certain types of shading that are not properly handled by...

CVE-2009-4117

Multiple stack-based buffer overflows in pdfshade4.c in MuPDF before commit 20091125231942, as used in SumatraPDF before 1.0.1, allow remote attackers to cause a denial of service and possibly execute arbitrary code via a /Decode array for certain types of shading that are not properly handled by...

CVE-2009-4117

Multiple stack-based buffer overflows in pdfshade4.c in MuPDF before commit 20091125231942, as used in SumatraPDF before 1.0.1, allow remote attackers to cause a denial of service and possibly execute arbitrary code via a /Decode array for certain types of shading that are not properly handled by...

MuPDF / SumatraPDF buffer overflow

Buffer overflow on PDF parsing...

MuPDF pdf_shade4.c multiple stack-based buffer overflows

Description =========== "MuPDF is a lightweight PDF viewer and toolkit written in portable C". It is used in particular by SumatraPDF which is a small open-source PDF viewer for Windows. MuPDF before commit 20091125231942 did not properly handle /Decode arrays in a shading of type 4 to 7, leading...

MuPDF pdf_shade4.c Multiple Stack-Based Buffer Overflows

No description provided by source. "MuPDF is a lightweight PDF viewer and toolkit written in portable C". It is used in particular by SumatraPDF which is a small open-source PDF viewer for Windows. MuPDF before commit 20091125231942 did not properly handle /Decode arrays in a shading of type 4 to...

MuPDF 20091125231942 - pdf_shade4.c Multiple Stack Buffer Overflows

MuPDF 20091125231942 - pdfshade4.c Multiple Stack Buffer Overflows "MuPDF is a lightweight PDF viewer and toolkit written in portable C". It is used in particular by SumatraPDF which is a small open-source PDF viewer for Windows. MuPDF before commit 20091125231942 did not properly handle /Decode...

MuPDF < 20091125231942 - 'pdf_shade4.c' Multiple Stack Buffer Overflows

"MuPDF is a lightweight PDF viewer and toolkit written in portable C". It is used in particular by SumatraPDF which is a small open-source PDF viewer for Windows. MuPDF before commit 20091125231942 did not properly handle /Decode arrays in a shading of type 4 to 7, leading to a stack-based buffer...

MuPDF pdf_shade4.c Multiple Stack-Based Buffer Overflows

Exploit for unknown platform in category local exploits ======================================================== MuPDF pdfshade4.c Multiple Stack-Based Buffer Overflows ======================================================== Title: MuPDF pdfshade4.c Multiple Stack-Based Buffer Overflows CVE-ID:...

CVE-2009-1605

Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdffunction.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.3 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: some of these details are obtained from thir...

Heap overflow

Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdffunction.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.3 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: some of these details are obtained from thir...

CVE-2009-1605

Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdffunction.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.3 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: some of these details are obtained from thir...

CVE-2009-1605

Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdffunction.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.3 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: some of these details are obtained from thir...

CVE-2009-1605

CVE-2009-1605 describes a heap-based buffer overflow in MuPDF’s loadexponentialfunc (mupdf/pdf_function.c) in the mupdf-20090223-win32 package, exploitable via crafted PDFs and affecting SumatraPDF 0.9.3 and earlier. The underlying issue could allow remote code execution. Public references from N...