Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:0461-1

Опубликовано: 16 фев. 2018
Источник: suse-cvrf

Описание

Security update for mupdf

This update for mupdf fixes the following issues:

  • CVE-2018-1000051: Fixed a use-after-free vulnerability in fz_keep_key_storable that can potentially result in DoS / remote code execution (boo#1080531)

Список пакетов

openSUSE Leap 42.3
mupdf-1.12.0-31.1
mupdf-devel-static-1.12.0-31.1

Описание

Artifex Mupdf version 1.12.0 contains a Use After Free vulnerability in fz_keep_key_storable that can result in DOS / Possible code execution. This attack appear to be exploitable via Victim opens a specially crafted PDF.


Затронутые продукты
openSUSE Leap 42.3:mupdf-1.12.0-31.1
openSUSE Leap 42.3:mupdf-devel-static-1.12.0-31.1

Ссылки