Denial Of Service (DoS)

2018-05-2505:02:49

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

61.0%

JSON

MuPDF is vulnerable to denial of service (DoS). The attack can be launched because PDF parser has multiple reachable assertions which can be introduced by sending a malicious file.

CPENameOperatorVersion
mupdfle1.10

CPE	Name	Operator	Version
	mupdf	le	1.10

References

git.ghostscript.com/?p=mupdf.git;a=commitdiff;h=71ceebcf56e682504da22c4035b39a2d451e8ffd;hp=7f82c01523505052615492f8e220f4348ba46995

git.ghostscript.com/?p=mupdf.git;a=commitdiff;h=8a3257b01faa899dd9b5e35c6bb3403cd709c371;hp=de39f005f12a1afc6973c1f5cec362d6545f70cb

git.ghostscript.com/?p=mupdf.git;a=commitdiff;h=b2e7d38e845c7d4922d05e6e41f3a2dc1bc1b14a;hp=f51836b9732c38d945b87fda0770009a77ba680c

bugs.chromium.org/p/oss-fuzz/issues/detail?id=5490

bugs.chromium.org/p/oss-fuzz/issues/detail?id=5501

bugs.chromium.org/p/oss-fuzz/issues/detail?id=5503

bugs.chromium.org/p/oss-fuzz/issues/detail?id=5511

bugs.chromium.org/p/oss-fuzz/issues/detail?id=5564

0.002 Low

EPSS

Percentile

61.0%

JSON

Related for VERACODE:6383