CVE-2017-5991

HIGH 7.5CVE-2017-5991 · Published 15/02/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
mupdf artifex	`< 1.11`	`1.11`

Description

An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdf_run_xobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fz_paint_pixmap_with_mask painting operation. Versions 1.11 and later are unaffected.

References

git.ghostscript.com
debian.org/security/2017/dsa-3797 · Third Party Advisory
securityfocus.com/bid/96213 · Broken Link
bugs.ghostscript.com/show_bug.cgi · Exploit
security.gentoo.org/glsa/201706-08 · Third Party Advisory
exploit-db.com/exploits/42138 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free