Advisories » MGASA-2014-0041

Updated mupdf packages fix a buffer overflow

Publication date: 08 Feb 2014
Modification date: 08 Feb 2014
Type: security
Affected Mageia releases : 3 , 4

Description

Updated mupdf packages fix security vulnerability:

A stack-based buffer overflow was found in mupdf's xps_parse_color() function.
An attacker could create a specially crafted XPS file that, when opened, could
cause mupdf or an application using mupdf to crash.
                

References

• http://seclists.org/fulldisclosure/2014/Jan/130
• https://lists.fedoraproject.org/pipermail/package-announce/2014-February/127861.html
• https://bugs.mageia.org/show_bug.cgi?id=12634

SRPMS

4/core

• mupdf-1.2-2.1.mga4

3/core

• mupdf-1.1-3.1.mga3