The pdf_to_num function in pdf-object.c in MuPDF before 1.10 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted file.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The pdf_to_num function in pdf-object.c in MuPDF before 1.10 allows remote attackers to cause a denial of     service (use-after-free and application crash) via a crafted file. (CVE-2016-8674)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Use-after-free vulnerability in the pdf_load_xref function in pdf/pdf-xref.c in MuPDF allows remote
    attackers to cause a denial of service (crash) via a crafted PDF file. (CVE-2016-6265)

  - Heap-based buffer overflow in the pdf_load_mesh_params function in pdf/pdf-shade.c in MuPDF allows remote
    attackers to cause a denial of service (crash) or execute arbitrary code via a large decode array.
    (CVE-2016-6525)

  - The pdf_to_num function in pdf-object.c in MuPDF before 1.10 allows remote attackers to cause a denial of
    service (use-after-free and application crash) via a crafted file. (CVE-2016-8674)

Multiple vulnerabilities have been found in the PDF viewer MuPDF, which may result in denial of service or the execution of arbitrary code if a malformed PDF file is opened.

ID	Name	Product	Family	Severity
253601	Linux Distros Unpatched Vulnerability : CVE-2016-8674	Nessus	Misc.	medium
400964	Alpine: multiple mupdf packages: security update to 1.9-r8 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
400964	Alpine: multiple mupdf packages: security update to 1.9-r8 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
97442	Debian DSA-3797-1 : mupdf - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2016-8674

medium

Tenable Plugins

medium

critical

critical

high