Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2019-13290

Опубликовано: 04 июл. 2019
Источник: debian

Описание

Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing remote attackers to execute arbitrary code via a crafted PDF file. This occurs with a large BDC property name that overflows the allocated size of a display list node.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
mupdffixed1.15.0+ds1-1package
mupdfnot-affectedjessiepackage

Примечания

  • https://bugs.ghostscript.com/show_bug.cgi?id=701118

  • https://git.ghostscript.com/?p=mupdf.git;h=aaf794439e40a2ef544f15b50c20e657414dec7a

  • https://git.ghostscript.com/?p=mupdf.git;h=ed19bc806809ad10c4ddce515d375581b86ede85

  • Introduced in 1.6 / https://git.ghostscript.com/?p=mupdf.git;a=commit;f=source/fitz/list-device.c;h=e9411aba2b71b67b8521f55917ab26585c464b88

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 6 лет назад

Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing remote attackers to execute arbitrary code via a crafted PDF file. This occurs with a large BDC property name that overflows the allocated size of a display list node.

CVSS3: 7.8
nvd
больше 6 лет назад

Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing remote attackers to execute arbitrary code via a crafted PDF file. This occurs with a large BDC property name that overflows the allocated size of a display list node.

github
больше 3 лет назад

Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing remote attackers to execute arbitrary code via a crafted PDF file. This occurs with a large BDC property name that overflows the allocated size of a display list node.

CVSS3: 6.3
fstec
около 7 лет назад

Уязвимость функции fz_append_display_node программы просмотра PDF-файлов Artifex MuPDF, вызванная переполнением буфера в динамической памяти, позволяющая нарушителю выполнить произвольный код