Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing remote attackers to execute arbitrary code via a crafted PDF file. This occurs with a large BDC property name that overflows the allocated size of a display list node.

A heap-based buffer overflow flaw was discovered in MuPDF, a lightweight PDF viewer, which may result in denial of service or the execution of arbitrary code if a malformed PDF file is opened.

Several issues have been found in mupdf, a lightweight PDF viewer.

The issues could be exploited by crafted PDF files that result in denial of service by heap-based buffer overflows, segmentation faults or out of bound reads.

For Debian 9 stretch, these problems have been fixed in version 1.9a+ds1-4+deb9u5.

We recommend that you upgrade your mupdf packages.

For the detailed security status of mupdf please refer to its security tracker page at: https://security-tracker.debian.org/tracker/mupdf

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

rebase to 1.16.1

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
140059	Debian DSA-4753-1 : mupdf - security update	Nessus	Debian Local Security Checks	high
138912	Debian DLA-2289-1 : mupdf security update	Nessus	Debian Local Security Checks	high
130777	Fedora 30 : mupdf (2019-10f02ad597)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2019-13290

high

Tenable Plugins

high

high

high