PT-2018-9226 · Artifex+1 · Mupdf+1

Sebastian Rasmussen

·

Publicado

2018-05-24

·

Atualizado

2024-07-15

·

CVE-2018-1000038

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Artifex MuPDF versions 1.12.0 and earlier
Description: A stack buffer overflow in the pdf lookup cmap full function in pdf/pdf-cmap.c could allow an attacker to execute arbitrary code via a crafted file. This issue affects the MuPDF library, which is used for rendering PDF files.
Recommendations: For Artifex MuPDF versions 1.12.0 and earlier, consider disabling the pdf lookup cmap full function until a patch is available to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

ALT-PU-2018-2415
CVE-2018-1000038

Produtos afetados

Alt Linux
Mupdf