CVE-2018-6544

Name
CVE-2018-6544
Description
pdf_load_obj_stm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error stack, which allows remote attackers to cause a denial of service via a crafted PDF document.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Exploit https://bugs.ghostscript.com/show_bug.cgi?id=698965
Issue Tracking https://bugs.ghostscript.com/show_bug.cgi?id=698830
Issue Tracking http://git.ghostscript.com/?p=mupdf.git;h=b03def134988da8c800adac1a38a41a1f09a1d89
Issue Tracking http://git.ghostscript.com/?p=mupdf.git;h=26527eef77b3e51c2258c8e40845bfbc015e405d
Third Party Advisory https://www.debian.org/security/2018/dsa-4152
Third Party Advisory https://security.gentoo.org/glsa/201811-15

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:artifex:mupdf:1.12.0:*:*:*:*:*:*:* mupdf == None == 1.12.0

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
mupdf edge-community 1.13-r0 None fixed
mupdf 3.22-community 1.13-r0 None fixed
mupdf 3.21-community 1.13-r0 None fixed
mupdf 3.20-community 1.13-r0 None fixed
mupdf 3.19-community 1.13-r0 None fixed
mupdf 3.18-community 1.13-r0 None fixed
mupdf 3.17-community 1.13-r0 None fixed
mupdf 3.11-main 1.13-r0 None fixed
mupdf 3.10-main 1.13-r0 None fixed