CVE-2018-1000037

Published: May 24, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

In Artifex MuPDF 1.12.0 and earlier, multiple reachable assertions in the PDF parser allow an attacker to cause a denial of service (assert crash) via a crafted file.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

GLSA-201811-15

vendor-advisory

http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=8a3257b01faa899dd9b5e35c6bb3403cd709c371%3Bhp=de39f005f12a1afc6973c1f5cec362d6545f70cb

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5511

DSA-4334

vendor-advisory

http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=b2e7d38e845c7d4922d05e6e41f3a2dc1bc1b14a%3Bhp=f51836b9732c38d945b87fda0770009a77ba680c

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5503

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5501

http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=71ceebcf56e682504da22c4035b39a2d451e8ffd%3Bhp=7f82c01523505052615492f8e220f4348ba46995

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5490

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5564

https://bugs.ghostscript.com/show_bug.cgi?id=698888

https://bugs.ghostscript.com/show_bug.cgi?id=698882

https://bugs.ghostscript.com/show_bug.cgi?id=698886

https://bugs.ghostscript.com/show_bug.cgi?id=698890

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2018-1000037

Description

Affected Products

References