{"id":"CVE-2018-1000040","state":"PUBLISHED","title":"In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of service (crash) or influence program fl","description":"In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of service (crash) or influence program flow via a crafted file.","publishedAt":"2018-05-24T13:00:00.000Z","updatedAt":"2024-08-05T12:33:48.855Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://security.gentoo.org/glsa/201811-15","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5596","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5600","https://www.debian.org/security/2018/dsa-4334","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5610","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5609","http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=83d4dae44c71816c084a635550acc1a51529b881%3Bhp=f597300439e62f5e921f0d7b1e880b5c1a1f1607","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5603","https://bugs.ghostscript.com/show_bug.cgi?id=699086","https://bugs.ghostscript.com/show_bug.cgi?id=698904","https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=ace9e69017c08e1e4ce5912014177414c0382004"],"weaknesses":[],"ingestedAt":"2026-10-29T19:44:06.197Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/1000xxx/CVE-2018-1000040.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-1000040","state":"PUBLISHED","datePublished":"2018-05-24T13:00:00.000Z","dateUpdated":"2024-08-05T12:33:48.855Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2018-02-02T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of service (crash) or influence program flow via a crafted file."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://security.gentoo.org/glsa/201811-15","name":"GLSA-201811-15","tags":["vendor-advisory"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5596"},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5600"},{"url":"https://www.debian.org/security/2018/dsa-4334","name":"DSA-4334","tags":["vendor-advisory"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5610"},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5609"},{"url":"http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=83d4dae44c71816c084a635550acc1a51529b881%3Bhp=f597300439e62f5e921f0d7b1e880b5c1a1f1607"},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5603"},{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=699086"},{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=698904"},{"url":"https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=ace9e69017c08e1e4ce5912014177414c0382004"}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"n/a"}]}],"providerMetadata":{"shortName":"mitre","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateUpdated":"2024-07-15T20:14:33.985Z"},"dateAssigned":"2018-05-18T00:00:00.000Z","datePublic":"2018-02-24T00:00:00.000Z"},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-07-23T18:25:21.913182Z","id":"CVE-2018-1000040","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-23T18:25:29.836Z"}},{"title":"CVE Program Container","references":[{"url":"https://security.gentoo.org/glsa/201811-15","name":"GLSA-201811-15","tags":["vendor-advisory","x_transferred"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5596","tags":["x_transferred"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5600","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2018/dsa-4334","name":"DSA-4334","tags":["vendor-advisory","x_transferred"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5610","tags":["x_transferred"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5609","tags":["x_transferred"]},{"url":"http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=83d4dae44c71816c084a635550acc1a51529b881%3Bhp=f597300439e62f5e921f0d7b1e880b5c1a1f1607","tags":["x_transferred"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5603","tags":["x_transferred"]},{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=699086","tags":["x_transferred"]},{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=698904","tags":["x_transferred"]},{"url":"https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=ace9e69017c08e1e4ce5912014177414c0382004","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T12:33:48.855Z"}}]}}}