Denial Of Service (DoS)

MuPDF is vulnerable to denial of service DoS attacks. A malicious user can pass a malicious pdf file to the fzskipspace function in pdf-xref.c to cause an infinite loop that can cause the application to crash...

CVE-2018-10289

In MuPDF 1.13.0, there is an infinite loop in the fzskipspace function of the pdf/pdf-xref.c file. A remote adversary could leverage this vulnerability to cause a denial of service via a crafted pdf file...

CVE-2018-10289

MuPDF 1.13.0 is affected by an infinite loop in fz_skip_space (pdf/pdf-xref.c) that can be exploited by a crafted PDF to cause a denial of service. Connected advisories confirm this CVE (CVE-2018-10289) and note mitigations/upgrades. Debian DLA-2765 states the fix is in mupdf 1.14.0+ds1-4+deb9u1;...

DEBIAN-CVE-2018-6192

In Artifex MuPDF 1.12.0, the pdfreadnewxref function in pdf/pdf-xref.c allows remote attackers to cause a denial of service segmentation violation and application crash via a crafted pdf file...

PT-2018-17397 · Artifex · Mupdf

Name of the Vulnerable Software and Affected Versions: Artifex MuPDF version 1.12.0 Description: The issue allows remote attackers to cause a denial of service, resulting in a segmentation violation and application crash, via a crafted pdf file. This is due to a problem in the pdf read new xref...

CVE-2017-17858

Heap-based buffer overflow in the ensuresolidxref function in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 allows a remote attacker to potentially execute arbitrary code via a crafted PDF file, because xref subsection object numbers are unrestricted...

Integer Overflow

MuPDF is vulnerable to integer overflows. An attacker can pass a malicious pdf file to the pdfreadnewxrefsection function in pdf/pdf-xref.c, causing an integer overflow in the application that can lead to arbitrary writes and the application crashing...

Integer overflow

An integer overflow was discovered in pdfreadnewxrefsection in pdf/pdf-xref.c in Artifex MuPDF 1.11...

CVE-2017-15587

An integer overflow was discovered in pdfreadnewxrefsection in pdf/pdf-xref.c in Artifex MuPDF 1.11...

CVE-2017-15587

An integer overflow was discovered in pdfreadnewxrefsection in pdf/pdf-xref.c in Artifex MuPDF 1.11...