← back
CVE-2017-5991

CVE-2017-5991

EPSS 15.2%
An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdf_run_xobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fz_paint_pixmap_with_mask painting operation. Versions 1.11 and later are unaffected.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/42138/unverifiedexploitdbwww.exploit-db.com/exploits/42138unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://git.ghostscript.com/?p=mupdf.git%3Bh=1912de5f08e90af1d9d0a9791f58ba3afdb9d465https://bugs.ghostscript.com/show_bug.cgi?id=697500https://security.gentoo.org/glsa/201706-08https://www.exploit-db.com/exploits/42138/http://www.debian.org/security/2017/dsa-3797http://www.securityfocus.com/bid/96213