CVE-2017-17866

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted PDF document.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.ghostscript.com/cgi-bin/findgit.cgi?520cc26d18c9ee245b56e9e91f9d4fcae02be5f0Patch, Third Party Advisory
https://bugs.ghostscript.com/show_bug.cgi?id=698699Permissions Required, Third Party Advisory
https://www.debian.org/security/2018/dsa-4334Third Party Advisory
http://www.ghostscript.com/cgi-bin/findgit.cgi?520cc26d18c9ee245b56e9e91f9d4fcae02be5f0Patch, Third Party Advisory
https://bugs.ghostscript.com/show_bug.cgi?id=698699Permissions Required, Third Party Advisory
https://www.debian.org/security/2018/dsa-4334Third Party Advisory

Timeline

Published: Dec 27, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-178678.8Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying the leasetrigger field CVE-2017-178686.1In Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter (p_r_p) value, as demonstrated by p_r_p_564233524_tag.CVE-2017-178696.1The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter.CVE-2017-17876.7IBM Publishing Engine 2.1.2 and 6.0.5 contains an undisclosed vulnerability that could allow a local user with administrative privileges to CVE-2017-178709.8The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action.CVE-2017-178719.8The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags action, or the ques-srch p CVE-2017-178729.8The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action.CVE-2017-178739.8Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.CVE-2017-178748.8Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, whi CVE-2017-178759.8The JEXTN FAQ Pro extension 4.0.0 for Joomla! has SQL Injection via the id parameter in a view=category action.CVE-2017-178767.5Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request CVE-2017-178779.8An issue was discovered in Valve Steam Link build 643. When the SSH daemon is enabled for local development, the device is publicly availabl