CVE-2018-19777: Medium severity artifex software mupdf vulnerability
Published Nov 30, 2018
·Updated
In Artifex MuPDF 1.14.0, there is an infinite loop in the function svgdevendtile in fitz/svg-device.c, as demonstrated by mutool.
Affected Software
4 affected componentsFixes available
debian/mupdf<=1.14.0+ds1-4+deb10u3, <=1.14.0+ds1-4+deb10u2
1.17.0+ds1-21.17.0+ds1-1.3~deb11u11.21.1+ds2-11.22.2+ds1-2
Artifex Mupdf=1.14.0
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Event History
Nov 30, 2018
CVE Published
via MITRE·09:00 AM
Data Sourced
via MITRE·09:00 AM
Description
Frequently Asked Questions
1
What is CVE-2018-19777?
CVE-2018-19777 is a vulnerability in Artifex MuPDF 1.14.0 that allows for an infinite loop in the function svg_dev_end_tile in fitz/svg-device.c.
2
What is the severity of CVE-2018-19777?
CVE-2018-19777 has a severity rating of 5.5 (Medium).
3
How does CVE-2018-19777 affect Artifex MuPDF?
CVE-2018-19777 affects Artifex MuPDF 1.14.0.
4
How can I fix CVE-2018-19777 for Artifex MuPDF?
To fix CVE-2018-19777 for Artifex MuPDF, update to version 1.17.0+ds1-2, 1.17.0+ds1-1.3~deb11u1, 1.21.1+ds2-1, or 1.22.2+ds1-2.
5
Are there any additional references for CVE-2018-19777?
Yes, you can find additional references for CVE-2018-19777 at the following links: [1] [2] [3].