PT-2019-17969 · Artifex · Artifex Mupdf

Zerokeeper · Publicado 2019-01-11 · Atualizado 2024-09-11 · CVE-2019-6131

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Artifex MuPDF version 1.14.0

Description The issue is related to infinite recursion with stack consumption in the svg run use symbol, svg run element, and svg run use functions in the svg-run.c file. This can be demonstrated using mutool.

Recommendations For Artifex MuPDF version 1.14.0, consider disabling the svg run use symbol, svg run element, and svg run use functions as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Uncontrolled Recursion

Enumeração de Fraquezas

CWE-674

Identificadores relacionados

CVE-2019-6131

Produtos afetados

Artifex Mupdf

Referências · 14

• 🔥 https://bugs.ghostscript.com/show_bug.cgi?id=700442 · Exploit
• https://ubuntu.com/security/CVE-2019-6131 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-6131 · Aviso do Fabricante
• http://ghostscript.com/cgi-bin/findgit.cgi?c8f7e48ff74720a5e984ae19d978a5ab4d5dde5b · Nota
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CNJNEX5EW6YH5OARXXSSXW4HHC5PIBSY · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-6131 · Aviso do Fabricante
• https://t.me/cvenotify/94220 · Publicação no Telegram
• http://securityfocus.com/bid/106558 · Nota
• https://cve.org/CVERecord?id=CVE-2019-6131 · Nota de Segurança
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SEK2EHVNREJ7XZMFF2MXRWKIF4IBHPNE · Aviso do Fabricante
• https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=c8f7e48ff74720a5e984ae19d978a5ab4d5dde5b · Nota
• https://osv.dev/vulnerability/CVE-2019-6131 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2019-6131 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-6131 · Nota de Segurança