Heap-based buffer overflow in MuPDF - CVE-2017-17858
Published: January 22, 2018 / Updated: August 3, 2020
Vulnerability identifier: #VU33156
CSH Severity: Medium
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-17858
CWE-ID: CWE-122
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Heap-based buffer overflow in the ensure_solid_xref function in pdf/pdf-xref.c in Artifex MuPDF 1.12.0. A remote attacker can use a crafted PDF file to trigger heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
MuPDF
Arch Linux
Fedora
mupdf (Alpine package)
mupdf
Arch Linux
Fedora
mupdf (Alpine package)
mupdf
How to mitigate CVE-2017-17858
Update to version 1.13.0.
MuPDF - update to 1.13.0
mupdf (Alpine package) - update to 1.13.0-r0
mupdf - addressed in versions 1.12.0-2.fc26, 1.12.0-2.fc27
mupdf (Alpine package) - update to 1.13.0-r0
mupdf - addressed in versions 1.12.0-2.fc26, 1.12.0-2.fc27
External References
Related Security Bulletins
- Heap-based buffer overflow in MuPDF
- Heap-based buffer overflow in mupdf (Alpine package)
- Arch Linux update for zathura-pdf-mupdf
- Arch Linux update for mupdf-tools
- Arch Linux update for libmupdf
- Arch Linux update for mupdf-gl
- Arch Linux update for mupdf
- Fedora 27 update for mupdf
- Fedora 26 update for mupdf