Stack-based buffer overflow in MuPDF - CVE-2017-6060

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU6922

Stack-based buffer overflow in MuPDF - CVE-2017-6060

Published: June 6, 2017 / Updated: April 7, 2020


Vulnerability identifier: #VU6922
CSH Severity: Low
CVSS v4: []
CVE-ID: CVE-2017-6060
CWE-ID: CWE-121
Exploitation vector: Remote access
Exploit availability: Public exploit is available

Vulnerability details

Stack-based buffer overflow in jstest_main.c in mujstest in Artifex Software, Inc. MuPDF 1.10a allows remote attackers to have unspecified impact via a crafted image.

Affected software

MuPDF
Gentoo Linux
mupdf (Alpine package)

How to mitigate CVE-2017-6060

Update to version 1.11-r1.

mupdf (Alpine package) - update to 1.10a-r3

Links to Public Exploits and PoC-codes

External References

Related Security Bulletins