CVE-2017-17866Improper Restriction of Operations within the Bounds of a Memory Buffer in Mupdf

Severity
7.8HIGHNVD
EPSS
0.2%
top 64.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 27
Latest updateMay 14

Description

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted PDF document.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

NVDartifex/mupdf< 1.12.0
Debianartifex/mupdf< 1.12.0+ds1-1+3

Also affects: Debian Linux 9.0

Patches

🔴Vulnerability Details

3
GHSA
GHSA-5mxm-p98v-fjxh: pdf/pdf-write2022-05-14
OSV
CVE-2017-17866: pdf/pdf-write2017-12-27
CVEList
CVE-2017-17866: pdf/pdf-write2017-12-23

📋Vendor Advisories

1
Debian
CVE-2017-17866: mupdf - pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes...2017

💬Community

2
Bugzilla
CVE-2017-17866 mupdf: buffer overrun in pdf_xref_len pdf/pdf-write.c2017-12-26
Bugzilla
CVE-2017-17866 mupdf: buffer overrun in pdf_xref_len pdf/pdf-write.c [fedora-all]2017-12-26
CVE-2017-17866 — Artifex Mupdf vulnerability | cvebase