6.8
CVSSv2

CVE-2016-8729

Published: 24/04/2018 Updated: 13/12/2022
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9. A specially crafted PDF can cause a negative number to be passed to a memset resulting in memory corruption and potential code execution. An attacker can specially craft a PDF and send to the victim to trigger this vulnerability.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

artifex mupdf 1.9

Vendor Advisories

Debian Bug report logs - #863886 jbig2dec: CVE-2016-8729 Package: jbig2dec; Maintainer for jbig2dec is Debian Printing Team <debian-printing@listsdebianorg>; Source for jbig2dec is src:jbig2dec (PTS, buildd, popcon) Reported by: Guido Günther <agx@sigxcpuorg> Date: Thu, 1 Jun 2017 15:21:01 UTC Severity: grave T ...