PT-2017-16811 · Artifex+1 · Mupdf+1

Kamil Frankowicz · CVE-2017-5991 · Publicado 2017-02-15 · Atualizado 2024-07-31

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Artifex MuPDF versions prior to 1912de5f08e90af1d9d0a9791f58ba3afdb9d465 Artifex MuPDF versions prior to 1.11

Description An issue was discovered in the pdf run xobject function in pdf-op-run.c, which encounters a NULL pointer dereference during a Fitz fz paint pixmap with mask painting operation.

Recommendations For versions prior to 1912de5f08e90af1d9d0a9791f58ba3afdb9d465, consider updating to a version that includes the fix for this issue. For versions prior to 1.11, consider updating to version 1.11 or later, as these versions are unaffected by this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability, other than updating to version 1.11 or later.

Exploit

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2018-2415

ALT-PU-2020-3475

ALT-PU-2020-3484

ALT-PU-2024-9899

CVE-2017-5991

DSA-3797-1

MGASA-2017-0479

Produtos afetados

Alt Linux

Mupdf

Referências · 77

• 🔥 https://bugs.ghostscript.com/show_bug.cgi?id=697500 · Exploit
• 🔥 https://exploit-db.com/exploits/42138 · Exploit
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5503 · Nota
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5501 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=20310 · Nota
• https://osv.dev/vulnerability/DSA-3797-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/ALPINE-CVE-2017-5991 · Aviso do Fabricante
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5596 · Nota
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5564 · Nota
• http://bugs.ghostscript.com/show_bug.cgi?id=696941 · Nota
• https://security.alpinelinux.org/vuln/CVE-2017-5991 · Nota
• https://errata.altlinux.org/ALT-PU-2020-3484 · Aviso do Fabricante
• https://bugs.ghostscript.com/show_bug.cgi?id=699686 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000039 · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2018-2415 · Aviso do Fabricante