Artifex Software MuPDF 'count_entries' function stack buffer overflow vulnerability

Artifex Software MuPDF is a PDF library from Artifex Software, USA. A security vulnerability exists in the 'countentries' function in the pdf-layer.c file in Artifex Software MuPDF version 1.10a. A remote attacker can exploit this vulnerability to cause a denial of service stack consumption and...

MuPDF Denial of Service Vulnerability (CNVD-2017-05320)

Artifex Software MuPDF is a PDF library from Artifex Software, USA. A denial of service vulnerability exists in the 'fzsubsamplepixmap' function in the fitz/pixmap.c file in Artifex Software MuPDF version 1.10a. A remote attacker can use this vulnerability to cause a denial of service application...

UBUNTU-CVE-2017-7264

Use-after-free vulnerability in the fzsubsamplepixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted document...

DEBIAN-CVE-2017-6060

Stack-based buffer overflow in jstestmain.c in mujstest in Artifex Software, Inc. MuPDF 1.10a allows remote attackers to have unspecified impact via a crafted image...

PT-2017-17622 · Artifex · Mupdf

Name of the Vulnerable Software and Affected Versions: Artifex MuPDF version 1.10a Description: The issue is related to a use-after-free vulnerability in the fz subsample pixmap function in fitz/pixmap.c. This vulnerability allows remote attackers to cause a denial of service, resulting in an...

openSUSE Security Update : mupdf (openSUSE-2017-196)

This update for mupdf to version 1.10a fixes the following issues : These security issues were fixed : - CVE-2016-10132: NULL pointer dereference in regexp because of a missing check after allocating memory allowing for DoS bsc1019877. - CVE-2016-10133: Heap buffer overflow write in jsstackoverfl...

openSUSE Security Update : mupdf (openSUSE-2017-197)

This update for mupdf to version 1.10a fixes the following issues : These security issues were fixed : - CVE-2016-10132: NULL pointer dereference in regexp because of a missing check after allocating memory allowing for DoS bsc1019877. - CVE-2016-10133: Heap buffer overflow write in jsstackoverfl...