CVE-2014-2013 Stack-based buffer overflow in the xps_parse_color function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote attackers to execute arbitrary code via a large number of entries in the ContextC...
HighCVSS 7.5
EPSS 14.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the xps_parse_color function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote attackers to execute arbitrary code via a large number of entries in the ContextColor value of the Fill attribute in a Path element.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/mupdf(Debian:12) | < 1.3-2 | 1.3-2 |
| debian/mupdf(Debian:13) | < 1.3-2 | 1.3-2 |
| debian/mupdf(Debian:14) | < 1.3-2 | 1.3-2 |
| artifex mupdf | <= 1.3 | No fix listed |
| artifex mupdf | = 1.0 | No fix listed |
| artifex mupdf | = 1.1 | No fix listed |
| artifex mupdf | = 1.2 | No fix listed |
References
- Debian Security Tracker CVE-2014-2013 vendor-advisory
- bugs.ghostscript.com exploit
- git.ghostscript.com
- openSUSE-SU-2014:0309 vendor-advisory
- 20140120 0day - MuPDF Stack-based Buffer Overflow in xps_parse_color() mailing-list
- [oss-security] 20140218 Re: CVE request: MuPDF Stack-based Buffer Overflow in xps_parse_color() mailing-list
- 58904 third-party-advisory
- DSA-2951 vendor-advisory
- 31090 exploit
- www.hdwsec.fr exploit
- 102340 vdb-entry
- 65036 vdb-entry
- bugs.debian.org issue-tracking