CVE-2016-6525: Buffer Overflow
Published Sep 22, 2016
·Updated
Heap-based buffer overflow in the pdfloadmeshparams function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a large decode array.
Affected Software
2 affected components
Debian Debian Linux=8.0
Artifex Mupdf<=1.9
Remediation
Patch Available
Patch Available
Event History
Sep 22, 2016
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-6525?
CVE-2016-6525 has been classified with a high severity as it can lead to a denial of service or potential execution of arbitrary code.
2
How do I fix CVE-2016-6525?
To fix CVE-2016-6525, update MuPDF to version 1.10 or higher and ensure that your system running Debian is also patched.
3
What software is affected by CVE-2016-6525?
CVE-2016-6525 affects MuPDF versions up to 1.9 and Debian Linux version 8.0.
4
Can CVE-2016-6525 be exploited remotely?
Yes, CVE-2016-6525 can be exploited remotely through specially crafted PDF files.
5
What kind of vulnerability is CVE-2016-6525?
CVE-2016-6525 is a heap-based buffer overflow vulnerability that can lead to memory corruption.