CVE-2017-14687: Buffer Overflow

Published Sep 22, 2017

Updated

Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016cb4f" on Windows. This occurs because of mishandling of XML tag name comparisons.

Affected Software

2 affected components

Artifex Mupdf=1.11

Microsoft Windows

Remediation

Patch Available

http://git.ghostscript.com/?p=mupdf.git;h=2b16dbd8f73269cb15ca61ece75cf8d2d196ed28

Event History

Sep 22, 2017

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2017-14687?

The severity of CVE-2017-14687 is classified as a denial of service vulnerability.

How do I fix CVE-2017-14687?

To fix CVE-2017-14687, update to a patched version of MuPDF that addresses the vulnerability.

What is the impact of CVE-2017-14687?

The impact of CVE-2017-14687 can lead to a denial of service or unspecified other effects when processing crafted .xps files.

Which software is affected by CVE-2017-14687?

CVE-2017-14687 specifically affects Artifex MuPDF version 1.11.

Is Windows affected by CVE-2017-14687?

CVE-2017-14687 does not directly affect Microsoft Windows, but it can be exploited on systems using the vulnerable version of MuPDF.