| CVE-2018-1000051 |
AVG-687 |
High |
No |
Arbitrary code execution |
Artifex Mupdf version 1.12.0 contains a use-after-free vulnerability in fz_keep_key_storable that can result in DOS / Possible code execution. This attack... |
| CVE-2018-6544 |
AVG-687 |
Medium |
Yes |
Denial of service |
pdf_load_obj_stm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error stack, which allows... |
| CVE-2018-6192 |
AVG-687 |
Medium |
No |
Denial of service |
In Artifex MuPDF 1.12.0, the pdf_read_new_xref function in pdf/pdf- xref.c allows remote attackers to cause a denial of service (segmentation violation and... |
| CVE-2018-6187 |
AVG-687 |
Medium |
No |
Denial of service |
In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnerability in the do_pdf_save_document function in the pdf/pdf- write.c file. Remote... |
| CVE-2018-5686 |
AVG-687 |
Medium |
No |
Denial of service |
In MuPDF 1.12.0, there is an infinite loop vulnerability and application hang in the pdf_parse_array function (pdf/pdf-parse.c) because EOF is not... |
| CVE-2017-17858 |
AVG-599 |
High |
No |
Arbitrary code execution |
Heap-based buffer overflow in the ensure_solid_xref function in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 allows an attacker to potentially execute arbitrary... |
| CVE-2017-15587 |
AVG-458 |
High |
No |
Arbitrary code execution |
An integer overflow leading to an out-of-bounds wrte has been found in mupdf <= 1.11. The parsing of a crafted PDF might allow an attacker to write... |
| CVE-2017-14687 |
AVG-458 |
High |
No |
Arbitrary code execution |
Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file. This occurs because of... |
| CVE-2017-14686 |
AVG-458 |
High |
No |
Arbitrary code execution |
Artifex MuPDF 1.11 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file. This occurs because read_zip_dir_imp in... |
| CVE-2017-14685 |
AVG-458 |
High |
No |
Arbitrary code execution |
Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file. This occurs because... |