CVE-2018-1000040

Published: May 24, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of service (crash) or influence program flow via a crafted file.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

GLSA-201811-15

vendor-advisory

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5596

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5600

DSA-4334

vendor-advisory

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5610

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5609

http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=83d4dae44c71816c084a635550acc1a51529b881%3Bhp=f597300439e62f5e921f0d7b1e880b5c1a1f1607

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5603

https://bugs.ghostscript.com/show_bug.cgi?id=699086

https://bugs.ghostscript.com/show_bug.cgi?id=698904

https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=ace9e69017c08e1e4ce5912014177414c0382004

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2018-1000040

Description

Affected Products

References