An integer overflow was discovered in pdf_read_new_xref_section in pdf/pdf-xref.c in Artifex MuPDF 1.11.

The remote host is affected by the vulnerability described in GLSA-201811-15 (MuPDF: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MuPDF. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker, by enticing a user to process a specially crafted       file, could possibly execute arbitrary code, cause a Denial of Service       condition, or have other unspecified impacts.
  Workaround :

    There is no known workaround at this time.

This update for mupdf to version 1.12.0 fixes several issues.

These security issues were fixed :

  - CVE-2018-5686: Prevent infinite loop in pdf_parse_array     function because EOF is not considered. Remote attackers     could leverage this vulnerability to cause a denial of     service via a crafted pdf file (bsc#1075936).

  - CVE-2017-15369: The build_filter_chain function in     pdf/pdf-stream.c mishandled a case where a variable may     reside in a register, which allowed remote attackers to     cause a denial of service (Fitz fz_drop_imp     use-after-free and application crash) or possibly have     unspecified other impact via a crafted PDF document     (bsc#1063413).

  - CVE-2017-15587: Prevent integer overflow in     pdf_read_new_xref_section that allowed for DoS     (bsc#1064027).

  - CVE-2017-17866: Fixed mishandling of length changes when     a repair operation occured during a clean operation,     which allowed remote attackers to cause a denial of     service (buffer overflow and application crash) or     possibly have unspecified other impact via a crafted PDF     document (bsc#1074116).

  - CVE-2017-17858: Fixed a heap-based buffer overflow in     the ensure_solid_xref function which allowed a remote     attacker to potentially execute arbitrary code via a     crafted PDF file, because xref subsection object numbers     were unrestricted (bsc#1077161).

For non-security changes please refer to the changelog.

CVE-2017-15369 CVE-2017-15587 CVE-2017-9216 CVE-2017-14685 CVE-2017-14686 CVE-2017-14687

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Two security issues were discovered in mupdf, a lightweight PDF viewer.

CVE-2017-14687 MuPDF allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file. This occurs because of mishandling of XML tag name comparisons.

CVE-2017-15587 An integer overflow was discovered in pdf_read_new_xref_section in pdf/pdf-xref.c

For Debian 7 'Wheezy', these problems have been fixed in version 0.9-2+deb7u4.

We recommend that you upgrade your mupdf packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple vulnerabilities have been found in MuPDF, a PDF file viewer, which may result in denial of service or the execution of arbitrary code.

  - CVE-2017-14685, CVE-2017-14686, and CVE-2017-14687     WangLin discovered that a crafted .xps file can crash     MuPDF and potentially execute arbitrary code in several     ways, since the application makes unchecked assumptions     on the entry format.

  - CVE-2017-15587     Terry Chia and Jeremy Heng discovered an integer     overflow that can cause arbitrary code execution via a     crafted .pdf file.

ID	Name	Product	Family	Severity
119160	GLSA-201811-15 : MuPDF: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
106358	openSUSE Security Update : mupdf (openSUSE-2018-89)	Nessus	SuSE Local Security Checks	high
105942	Fedora 27 : mupdf (2017-a1ad512b22)	Nessus	Fedora Local Security Checks	high
105132	Fedora 25 : mupdf (2017-9ae6e39bde)	Nessus	Fedora Local Security Checks	high
104976	Fedora 26 : mupdf (2017-267f37c544)	Nessus	Fedora Local Security Checks	high
104438	Debian DLA-1164-1 : mupdf security update	Nessus	Debian Local Security Checks	high
104134	Debian DSA-4006-1 : mupdf - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2017-15587

high

Tenable Plugins

high

high

high

high

high

high

high