NVD Vulnerability Detail

CVE-2017-5991

Summary	An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdf_run_xobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fz_paint_pixmap_with_mask painting operation. Versions 1.11 and later are unaffected.
Publication Date	Feb. 15, 2017, 3:59 p.m.
Registration Date	Jan. 26, 2021, 1:26 p.m.
Last Update	Nov. 21, 2024, 12:28 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:artifex:mupdf::::::::					1.11

Related information, measures and tools

No	URL	タグ
1	http://git.ghostscript.com/?p=mupdf.git%3Bh=1912de5f08e90af1d9d0a9791f58ba3afdb9d465
2	http://git.ghostscript.com/?p=mupdf.git%3Bh=1912de5f08e90af1d9d0a9791f58ba3afdb9d465
3	http://www.debian.org/security/2017/dsa-3797	Third Party Advisory
4	http://www.debian.org/security/2017/dsa-3797	Third Party Advisory
5	http://www.securityfocus.com/bid/96213	Broken Link
6	http://www.securityfocus.com/bid/96213	Broken Link
7	https://bugs.ghostscript.com/show_bug.cgi?id=697500	Exploit Third Party Advisory
8	https://bugs.ghostscript.com/show_bug.cgi?id=697500	Exploit Third Party Advisory
9	https://security.gentoo.org/glsa/201706-08	Third Party Advisory
10	https://security.gentoo.org/glsa/201706-08	Third Party Advisory
11	https://www.exploit-db.com/exploits/42138/	Exploit Third Party Advisory VDB Entry
12	https://www.exploit-db.com/exploits/42138/	Exploit Third Party Advisory VDB Entry

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-476	NULL ポインタデリファレンス	https://cwe.mitre.org/data/definitions/476.html

JVN Vulnerability Information

Artifex Software, Inc MuPDF の pdf-op-run.c の pdf_run_xobject 関数における NULL ポインタデリファレンスを引き起こされる脆弱性

Title	Artifex Software, Inc MuPDF の pdf-op-run.c の pdf_run_xobject 関数における NULL ポインタデリファレンスを引き起こされる脆弱性
Summary	Artifex Software, Inc MuPDF の pdf-op-run.c の pdf_run_xobject 関数には、Fitz fz_paint_pixmap_with_mask ペイント処理の際、NULL ポインタデリファレンスを引き起こされる脆弱性が存在します。
Possible impacts	NULL ポインタデリファレンスを引き起こされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Feb. 10, 2017, midnight
Registration Date	March 14, 2017, 3:47 p.m.
Last Update	March 14, 2017, 3:47 p.m.

Affected System

Artifex Software

MuPDF 1912de5f08e90af1d9d0a9791f58ba3afdb9d465 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2017-5991	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5991
National Vulnerability Database (NVD)
2	CVE-2017-5991	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5991

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-476	http://cwe.mitre.org/data/definitions/476.html

ベンダー情報

No	Name	URL
Artifex Software
1	Bug 697500: Fix NULL ptr access.	http://git.ghostscript.com/?p=mupdf.git;h=1912de5f08e90af1d9d0a9791f58ba3afdb9d465
Bugzilla
2	Bug 697500	https://bugs.ghostscript.com/show_bug.cgi?id=697500

Change Log

No	Changed Details	Date of change
0	[2017年03月14日] 掲載	Feb. 17, 2018, 10:37 a.m.