Описание
In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of service (crash) or influence program flow via a crafted file.
Ссылки
- ExploitIssue Tracking
- ExploitIssue Tracking
- ExploitIssue Tracking
- ExploitIssue TrackingPatchThird Party Advisory
- ExploitIssue Tracking
- Third Party Advisory
- Third Party Advisory
- ExploitIssue Tracking
- ExploitIssue Tracking
- ExploitIssue Tracking
- ExploitIssue TrackingPatchThird Party Advisory
- ExploitIssue Tracking
Уязвимые конфигурации
Конфигурация 1Версия до 1.12.0 (включая)
cpe:2.3:a:artifex:mupdf:*:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
EPSS
Процентиль: 49%
0.00262
Низкий
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 5.5
ubuntu
больше 7 лет назад
In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of service (crash) or influence program flow via a crafted file.
CVSS3: 5.5
debian
больше 7 лет назад
In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized val ...
CVSS3: 5.5
github
больше 3 лет назад
In MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of service (crash) or influence program flow via a crafted file.
EPSS
Процентиль: 49%
0.00262
Низкий
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-20