Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5419
HistoryNov 13, 2017 - 8:25 a.m.

Integer Overflow

2017-11-1308:25:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

EPSS

0.002

Percentile

60.1%

MuPDF is vulnerable to integer overflows. An attacker can pass a malicious pdf file to the pdf_read_new_xref_section() function in pdf/pdf-xref.c, causing an integer overflow in the application that can lead to arbitrary writes and the application crashing.