Description
Integer overflow in the js_regcomp function in regexp.c in Artifex Software, Inc. MuJS before commit b6de34ac6d8bb7dd5461c57940acfbd3ee7fd93e allows attackers to cause a denial of service (application crash) via a crafted regular expression.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 16.04 LTS | mupdf | No fix yet | — |
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1390266
- FEDORA-2016-2edfd75312 vendor-advisory
- [oss-security] 20161030 Re: CVE request - integer overflow and crash parsing regex in mujs mailing-list
- FEDORA-2016-4cf3e3f488 vendor-advisory
- FEDORA-2016-49a72fb9bd vendor-advisory
- 96006 vdb-entry