Lucene search
Veracode Vulnerability DatabaseVERACODE:6778HistoryJun 12, 2018 - 1:23 p.m.
Remote Code Execution (RCE)
2018-06-1213:23:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
EPSS
0.004
Percentile
75.2%
MuPDF is vulnerable to remote code execution (RCE) attacks. A malicious user can pass a malicious pdf file to the pdf_lookup_cmap_full function in pdf-cmap.c to cause a stack buffer overflow that can lead to arbitrary code being executed.
References
git.ghostscript.com/?p=mupdf.git;a=commitdiff;h=71ceebcf56e682504da22c4035b39a2d451e8ffd;hp=7f82c01523505052615492f8e220f4348ba46995
git.ghostscript.com/?p=mupdf.git;a=commitdiff;h=f597300439e62f5e921f0d7b1e880b5c1a1f1607;hp=093fc3b098dc5fadef5d8ad4b225db9fb124758b
bugs.chromium.org/p/oss-fuzz/issues/detail?id=5494
bugzilla.redhat.com/show_bug.cgi?id=1582313
Related
prion
prion
Stack overflow
2018-05-24 13:29:00
cve
cve
CVE-2018-1000038
2018-05-24 13:29:00
osv
osv
CVE-2018-1000038
2018-05-24 13:29:00
debiancve
debiancve
CVE-2018-1000038
2018-05-24 13:29:00
ubuntucve
ubuntucve
CVE-2018-1000038
2018-05-24 00:00:00
cvelist
cvelist
CVE-2018-1000038
2018-05-24 13:00:00
nvd
nvd
CVE-2018-1000038
2018-05-24 13:29:00
gentoo
gentoo
MuPDF: Multiple vulnerabilities
2018-11-26 00:00:00
nessus
nessus
GLSA-201811-15 : MuPDF: Multiple vulnerabilities
2018-11-27 00:00:00