PT-2014-9117 · Artifex · Mupdf

Publicado 2014-02-08 · Atualizado 2014-02-08

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions mupdf (affected versions not specified)

Description A stack-based buffer overflow was found in the xps parse color() function, which could be exploited by an attacker creating a specially crafted XPS file. This file, when opened, could cause mupdf or an application using mupdf to crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2014-0041

Produtos afetados

Mupdf

Referências · 5

• http://seclists.org/fulldisclosure/2014/Jan/130 · Nota
• https://advisories.mageia.org/MGASA-2014-0041.html · Nota de Segurança
• https://lists.fedoraproject.org/pipermail/package-announce/2014-February/127861.html · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2014-0041 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=12634 · Nota