Lucene search
Veracode Vulnerability DatabaseVERACODE:28433HistoryDec 06, 2020 - 4:35 a.m.
Denial Of Service (DoS)
2020-12-0604:35:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
mupdf
vulnerability
denial of service
null pointer
dereference
pdf-op-run.c
fz_paint_pixmap_with_mask
painting operation
EPSS
0.026
Percentile
90.5%
mupdf is vulnerable to denial of service. A NULL pointer dereference in the pdf_run_xobject function in pdf-op-run.c during a Fitz fz_paint_pixmap_with_mask painting operation allows an attacker to crash the application.
References
git.ghostscript.com/?p=mupdf.git;h=1912de5f08e90af1d9d0a9791f58ba3afdb9d465
www.debian.org/security/2017/dsa-3797
www.securityfocus.com/bid/96213
bugs.ghostscript.com/show_bug.cgi?id=697500
security-tracker.debian.org/tracker/CVE-2017-5991
security.gentoo.org/glsa/201706-08
www.exploit-db.com/exploits/42138/
Related
prion
prion
Null pointer dereference
2017-02-15 06:59:00
alpinelinux
alpinelinux
CVE-2017-5991
2017-02-15 06:59:00
zdt
zdt
Artifex MuPDF - Null Pointer Dereference Vulnerability
2017-06-08 00:00:00
ubuntucve
ubuntucve
CVE-2017-5991
2017-02-15 00:00:00
cve
cve
CVE-2017-5991
2017-02-15 06:59:00
exploitdb
exploitdb
Artifex MuPDF - Null Pointer Dereference
2017-06-07 00:00:00
debiancve
debiancve
CVE-2017-5991
2017-02-15 06:59:00
cvelist
cvelist
CVE-2017-5991
2017-02-15 06:11:00
nvd
nvd
CVE-2017-5991
2017-02-15 06:59:00
osv
osv
CVE-2017-5991
2017-02-15 06:59:00
mupdf - security update
2017-02-28 00:00:00
openvas
openvas
Debian Security Advisory DSA 3797-1 (mupdf - security update)
2017-02-28 00:00:00
Mageia: Security Advisory (MGASA-2017-0479)
2022-01-28 00:00:00
Debian: Security Advisory (DSA-3797-1)
2017-02-27 00:00:00
debian
debian
[SECURITY] [DSA 3797-1] mupdf security update
2017-02-28 21:52:04
nessus
nessus
Debian DSA-3797-1 : mupdf - security update
2017-03-01 00:00:00
GLSA-201706-08 : MuPDF: Multiple vulnerabilities
2017-06-07 00:00:00
gentoo
gentoo
MuPDF: Multiple vulnerabilities
2017-06-06 00:00:00
mageia
mageia
Updated mupdf packages fix security vulnerability
2017-12-31 15:00:06