CVE-2016-6525

NameCVE-2016-6525
DescriptionHeap-based buffer overflow in the pdf_load_mesh_params function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a large decode array.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
ReferencesDLA-589-1, DSA-3655-1
NVD severityhigh (attack range: remote)
Debian Bugs833417

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
mupdf (PTS)wheezy0.9-2+deb7u2vulnerable
wheezy (security)0.9-2+deb7u4fixed
jessie (security), jessie1.5-1+deb8u3fixed
stretch (security), stretch1.9a+ds1-4+deb9u2fixed
buster, sid1.11+ds1-2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
mupdfsource(unstable)1.9a+ds1-1.2high833417
mupdfsourcejessie1.5-1+deb8u1highDSA-3655-1
mupdfsourcewheezy0.9-2+deb7u3highDLA-589-1

Notes

http://bugs.ghostscript.com/show_bug.cgi?id=696954
Fixed by: http://git.ghostscript.com/?p=mupdf.git;h=39b0f07dd960f34e7e6bf230ffc3d87c41ef0f2e

Search for package or bug name: Reporting problems