PT-2018-5051 · Artifex · Mupdf

Publicado 2017-03-24 · Atualizado 2024-06-15 · CVE-2016-8729

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Artifex MuPDF version 1.9

Description A memory corruption issue exists in the JBIG2 parser. It can be triggered by a specially crafted PDF, causing a negative number to be passed to a memset, which results in memory corruption and potential code execution. An attacker can exploit this by sending a crafted PDF to the victim.

Recommendations For Artifex MuPDF version 1.9, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2016-8729

DLA-874-1

DSA-3817-1

OPENSUSE-SU-2024:11068-1

Produtos afetados

Mupdf

Referências · 37

• https://t.me/cvenotify/39760 · Publicação no Telegram
• https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=1a7ef61410884daff8ff8391ddcecc3102acd989 · Nota
• https://suse.com/security/cve/CVE-2018-5686 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-8729 · Aviso do Fabricante
• https://cgit.ghostscript.com/cgi-bin/cgit.cgi/jbig2dec.git/commit/?id=e698d5c11d27212aa1098bc5b1673a3378563092 · Nota
• https://suse.com/security/cve/CVE-2016-10141 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:11068-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-10221 · Nota
• https://suse.com/security/cve/CVE-2018-16648 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-8729 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-6192 · Nota
• https://osv.dev/vulnerability/DSA-3817-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-10132 · Nota
• https://bugs.ghostscript.com/show_bug.cgi?id=697395 · Nota
• https://suse.com/security/cve/CVE-2017-5627 · Nota