UBUNTU-CVE-2018-1000039
- Source
- https://ubuntu.com/security/CVE-2018-1000039
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-1000039.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2018-1000039
- Upstream
- Published
- 2018-05-24T13:29:00Z
- Modified
- 2025-07-16T07:33:40.523288Z
- Severity
-
- 6.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
- 7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Ubuntu - medium
- Summary
- [none]
- Details
-
In MuPDF 1.12.0 and earlier, multiple heap use after free bugs in the PDF parser could allow an attacker to execute arbitrary code, read memory, or cause a denial of service via a crafted file.
- References
-
- https://ubuntu.com/security/CVE-2018-1000039
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5492
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5513
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5521
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5604
- http://git.ghostscript.com/?p=mupdf.git;a=commitdiff;h=4dcc6affe04368461310a21238f7e1871a752a05;hp=8ec561d1bccc46e9db40a9f61310cd8b3763914e
- http://git.ghostscript.com/?p=mupdf.git;a=commitdiff;h=71ceebcf56e682504da22c4035b39a2d451e8ffd;hp=7f82c01523505052615492f8e220f4348ba46995
- http://git.ghostscript.com/?p=mupdf.git;a=commitdiff;h=f597300439e62f5e921f0d7b1e880b5c1a1f1607;hp=093fc3b098dc5fadef5d8ad4b225db9fb124758b
- https://www.cve.org/CVERecord?id=CVE-2018-1000039