CVE-2018-6192: Buffer Overflow

Published Jan 24, 2018

Updated

In Artifex MuPDF 1.12.0, the pdfreadnewxref function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation violation and application crash) via a crafted pdf file.

Affected Software

3 affected componentsFixes available

debian/mupdf

1.14.0+ds1-4+deb10u31.14.0+ds1-4+deb10u21.17.0+ds1-21.17.0+ds1-1.3~deb11u11.21.1+ds2-11.22.2+ds1-2

Artifex Mupdf=1.12.0

Debian Debian Linux=9.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/mupdf to a version that resolves this vulnerability.
Fixed in 1.14.0+ds1-4+deb10u3Fixed in 1.14.0+ds1-4+deb10u2Fixed in 1.17.0+ds1-2Fixed in 1.17.0+ds1-1.3~deb11u1Fixed in 1.21.1+ds2-1Fixed in 1.22.2+ds1-2

Event History

Jan 24, 2018

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Data Sourced

via NVD·09:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID for this Artifex MuPDF vulnerability?

The vulnerability ID for this Artifex MuPDF vulnerability is CVE-2018-6192.

What is the severity level of CVE-2018-6192?

The severity level of CVE-2018-6192 is medium.

How does CVE-2018-6192 impact Artifex MuPDF?

CVE-2018-6192 allows remote attackers to cause a denial of service (segmentation violation and application crash) in Artifex MuPDF 1.12.0.

How can I fix CVE-2018-6192 in Artifex MuPDF?

To fix CVE-2018-6192 in Artifex MuPDF, you should update to version 1.14.0+ds1-4+deb10u3 or later.

Where can I find more information about CVE-2018-6192?

You can find more information about CVE-2018-6192 at the following references: [1] [2] [3].