cve/2014/CVE-2014-2013.md

CVE-2014-2013

Description

Stack-based buffer overflow in the xps_parse_color function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote attackers to execute arbitrary code via a large number of entries in the ContextColor value of the Fill attribute in a Path element.

POC

Reference

• http://bugs.ghostscript.com/show_bug.cgi?id=694957
• http://seclists.org/fulldisclosure/2014/Jan/130
• http://www.exploit-db.com/exploits/31090

Github

No PoCs found on GitHub currently.