PT-2014-9117 · Artifex · Mupdf

Published 2014-02-08 · Updated 2014-02-08

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions mupdf (affected versions not specified)

Description A stack-based buffer overflow was found in the xps parse color() function, which could be exploited by an attacker creating a specially crafted XPS file. This file, when opened, could cause mupdf or an application using mupdf to crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2014-0041

Affected Products

Mupdf

References · 5

• https://advisories.mageia.org/MGASA-2014-0041.html · Security Note
• https://lists.fedoraproject.org/pipermail/package-announce/2014-February/127861.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2014-0041 · Vendor Advisory
• http://seclists.org/fulldisclosure/2014/Jan/130 · Note
• https://bugs.mageia.org/show_bug.cgi?id=12634 · Note