Vulnerability CVE-2017-5991: Information
Description
An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdf_run_xobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fz_paint_pixmap_with_mask painting operation. Versions 1.11 and later are unaffected.
Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fixed packages
Package name | Branch | Fixed in version | Version from repository | Errata ID | Task # | State |
---|---|---|---|---|---|---|
mupdf | sisyphus | 1.13.0-alt1 | 1.18.0-alt1 | ALT-PU-2018-2415-1 | 213929 | Fixed |
mupdf | p10 | 1.13.0-alt1 | 1.18.0-alt1 | ALT-PU-2018-2415-1 | 213929 | Fixed |
mupdf | p9 | 1.18.0-alt1 | 1.18.0-alt1 | ALT-PU-2020-3484-1 | 263155 | Fixed |
mupdf | c10f1 | 1.13.0-alt1 | 1.18.0-alt1 | ALT-PU-2018-2415-1 | 213929 | Fixed |
References to Advisories, Solutions, and Tools
Hyperlink | Resource |
---|---|
https://bugs.ghostscript.com/show_bug.cgi?id=697500 |
|
96213 |
|
GLSA-201706-08 |
|
42138 |
|
DSA-3797 |
|
http://git.ghostscript.com/?p=mupdf.git%3Bh=1912de5f08e90af1d9d0a9791f58ba3afdb9d465 |