In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer over-read) by crafting a DJVU file.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_name": "djview", "binary_version": "3.5.27.1-5ubuntu0.1" }, { "binary_name": "djview-dbgsym", "binary_version": "3.5.27.1-5ubuntu0.1" }, { "binary_name": "djview3", "binary_version": "3.5.27.1-5ubuntu0.1" }, { "binary_name": "djview3-dbgsym", "binary_version": "3.5.27.1-5ubuntu0.1" }, { "binary_name": "djvulibre-bin", "binary_version": "3.5.27.1-5ubuntu0.1" }, { "binary_name": "djvulibre-bin-dbgsym", "binary_version": "3.5.27.1-5ubuntu0.1" }, { "binary_name": "djvulibre-dbg", "binary_version": "3.5.27.1-5ubuntu0.1" }, { "binary_name": "djvulibre-desktop", "binary_version": "3.5.27.1-5ubuntu0.1" }, { "binary_name": "djvuserve", "binary_version": "3.5.27.1-5ubuntu0.1" }, { "binary_name": "djvuserve-dbgsym", "binary_version": "3.5.27.1-5ubuntu0.1" }, { "binary_name": "libdjvulibre-dev", "binary_version": "3.5.27.1-5ubuntu0.1" }, { "binary_name": "libdjvulibre-dev-dbgsym", "binary_version": "3.5.27.1-5ubuntu0.1" }, { "binary_name": "libdjvulibre-text", "binary_version": "3.5.27.1-5ubuntu0.1" }, { "binary_name": "libdjvulibre21", "binary_version": "3.5.27.1-5ubuntu0.1" }, { "binary_name": "libdjvulibre21-dbgsym", "binary_version": "3.5.27.1-5ubuntu0.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_name": "djview", "binary_version": "3.5.27.1-8ubuntu0.1" }, { "binary_name": "djview3", "binary_version": "3.5.27.1-8ubuntu0.1" }, { "binary_name": "djvulibre-bin", "binary_version": "3.5.27.1-8ubuntu0.1" }, { "binary_name": "djvulibre-bin-dbgsym", "binary_version": "3.5.27.1-8ubuntu0.1" }, { "binary_name": "djvulibre-desktop", "binary_version": "3.5.27.1-8ubuntu0.1" }, { "binary_name": "djvuserve", "binary_version": "3.5.27.1-8ubuntu0.1" }, { "binary_name": "djvuserve-dbgsym", "binary_version": "3.5.27.1-8ubuntu0.1" }, { "binary_name": "libdjvulibre-dev", "binary_version": "3.5.27.1-8ubuntu0.1" }, { "binary_name": "libdjvulibre-text", "binary_version": "3.5.27.1-8ubuntu0.1" }, { "binary_name": "libdjvulibre21", "binary_version": "3.5.27.1-8ubuntu0.1" }, { "binary_name": "libdjvulibre21-dbgsym", "binary_version": "3.5.27.1-8ubuntu0.1" } ] }