CVE-2017-5896: Buffer Overflow
Heap-based buffer overflow in the fzsubsamplepixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted image.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5896?
CVE-2017-5896 is classified as a moderate severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2017-5896?
To fix CVE-2017-5896, update MuPDF to version 1.10b or later, which addresses the heap-based buffer overflow.
What types of systems are affected by CVE-2017-5896?
CVE-2017-5896 affects all versions of MuPDF up to 1.10, specifically targeting the handling of crafted images.
What impact does CVE-2017-5896 have on my applications using MuPDF?
Exploiting CVE-2017-5896 can lead to an out-of-bounds read, causing crashes and a denial of service in applications utilizing MuPDF.
Are there any known exploits for CVE-2017-5896?
Yes, CVE-2017-5896 can be exploited by attackers using crafted images to trigger the buffer overflow.