CVE-2017-14686: Buffer Overflow

Published Sep 22, 2017

Updated

Artifex MuPDF 1.11 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d" on Windows. This occurs because readzipdirimp in fitz/unzip.c does not check whether size fields in a ZIP entry are negative numbers.

Affected Software

2 affected components

Artifex Mupdf=1.11

Microsoft Windows

Remediation

Patch Available

http://git.ghostscript.com/?p=mupdf.git;h=0f0fbc07d9be31f5e83ec5328d7311fdfd8328b1

Event History

Sep 22, 2017

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2017-14686?

CVE-2017-14686 is classified as a critical vulnerability due to its potential for remote code execution and denial of service.

How do I fix CVE-2017-14686?

To fix CVE-2017-14686, upgrade to a patched version of MuPDF that addresses this vulnerability.

What types of attacks can CVE-2017-14686 enable?

CVE-2017-14686 can enable attackers to execute arbitrary code or cause a denial of service on affected systems.

Which versions of MuPDF are affected by CVE-2017-14686?

CVE-2017-14686 specifically affects MuPDF version 1.11.

What file type is exploited in CVE-2017-14686?

CVE-2017-14686 is exploited through a crafted .xps file.