MuPDF Multiple Integer Overflow Vulnerabilities

Bugtraq ID:	46543
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 24 2011 12:00AM
Updated:	Feb 24 2011 12:00AM
Credit:	Stefan Cornelius of Secunia Research
Vulnerable:	Sumatra PDF Sumatra PDF 0.9.3 Sumatra PDF Sumatra PDF 1.2 Sumatra PDF Sumatra PDF 1.1 MuPDF MuPDF 0.7 MuPDF MuPDF 0
Not Vulnerable:	Sumatra PDF Sumatra PDF 1.3

MuPDF Multiple Integer Overflow Vulnerabilities

MuPDF is prone to multiple integer-overflow vulnerabilities because it fails to properly validate user-supplied input.

Successful exploits may allow attackers to execute arbitrary code in the context of applications that use the affected library. Failed exploit attempts will likely result in denial-of-service conditions.

MuPDF 0.7 is vulnerable; other versions may also be affected.

MuPDF Multiple Integer Overflow Vulnerabilities

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

MuPDF Multiple Integer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

MuPDF Multiple Integer Overflow Vulnerabilities

References:

• MuPDF Homepage (MuPDF)
  
• Secunia Research: MuPDF Two Integer Overflow Vulnerabilities (Secunia)
  
• Secunia Research: SumatraPDF Two Integer Overflow Vulnerabilities (Secunia)
  
• Sumatra PDF Homepage (Sumatra PDF)