Stack-based buffer overflow in jstest_main.c in mujstest in Artifex Software, Inc.

Published 9 y ago 2017-03-15 · modified 4 mo ago 2026-06-17 · JSON

CVSS

7.8

v3.1 · NVD

CISA KEV

not known exploited

EPSS

6.8%

percentile 94%

Public exploits

Exploit-DB

Stack-based buffer overflow in jstest_main.c in mujstest in Artifex Software, Inc. MuPDF 1.10a allows remote attackers to have unspecified impact via a crafted image.

CISA SSVC assessment

Exploitation: none
Automatable: no
Technical impact: total
Assessed: 2 y ago 2024-09-13

Exploit prediction (EPSS)

6.80% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.

Exploits and detections

EDB-42139 Artifex MuPDF mujstest 1.10a - Null Pointer Dereference · dos · 2017-02-17

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.1	7.8	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`
NVD	2.0	6.8	`AV:N/AC:M/Au:N/C:P/I:P/A:P`

Classification

Weakness

CWE-787 Out-of-bounds Write

References

securityfocus.com /bid/96266 · vdb-entry, x_refsource_BID, x_transferred
openwall.com /lists/oss-security/2017/02/18/1 · mailing-list, x_refsource_MLIST, x_transferred
security.gentoo.org /glsa/201706-08 · vendor-advisory, x_refsource_GENTOO, x_transferred
blogs.gentoo.org /ago/2017/02/17/mupdf-mujstest-stack-based-buffer-overflow-in-main-jstest_main-c/ · x_refsource_MISC, x_transferred
bugs.ghostscript.com /show_bug.cgi?id=697551 · x_refsource_MISC, x_transferred
lists.debian.org /debian-lts-announce/2021/09/msg00013.html · mailing-list, x_refsource_MLIST, x_transferred
cgit.ghostscript.com /cgi-bin/cgit.cgi/mupdf.git/commit/?id=06a012a42c9884e3cd653e7826cff1ddec04eb6e
cgit.ghostscript.com /cgi-bin/cgit.cgi/mupdf.git/commit/?id=e089b2e2c1d38c5696c7dfd741e21f8f3ef22b14

Sources

CVE List: CVE-2017-6060
NVD: CVE-2017-6060

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.

Summary