CVE-2016-8674: Use After Free
An use-after-free vulnerability was found in mupdf pdftonum. A maliciously created file could cause the application to crash.
Upstream bugs:
http://bugs.ghostscript.com/showbug.cgi?id=697015 http://bugs.ghostscript.com/showbug.cgi?id=697019
Upstream patch:
http://git.ghostscript.com/?p=mupdf.git;h=1e03c06456d997435019fb3526fa2d4be7dbc6ec
References:
http://seclists.org/oss-sec/2016/q4/149 https://blogs.gentoo.org/ago/2016/09/22/mupdf-use-after-free-in-pdftonum-pdf-object-c/
Other sources
The pdftonum function in pdf-object.c in MuPDF before 1.10 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted file.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8674?
CVE-2016-8674 is considered a high severity vulnerability due to its potential for application crashes.
How do I fix CVE-2016-8674?
To fix CVE-2016-8674, update to a version of MuPDF that is higher than 1.9a, as later versions contain patches.
What causes the CVE-2016-8674 vulnerability?
CVE-2016-8674 is caused by a use-after-free error in the pdf_to_num function within MuPDF.
What kind of attack vector is associated with CVE-2016-8674?
The attack vector for CVE-2016-8674 involves a maliciously crafted PDF file that can exploit the vulnerability.
Is CVE-2016-8674 present in all versions of MuPDF?
CVE-2016-8674 is present in MuPDF versions up to and including 1.9a; later versions are not affected.