{"id":"CVE-2014-2013","title":"Stack-based buffer overflow in the xps_parse_color function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote attackers to execute ","published":"2014-03-03T12:55:04.350Z","updated":"2026-06-16T20:05:55.613Z","severity":"high","cvssScore":7.5,"epss":0.14787,"epssPct":0.9673,"kev":false,"maturity":"poc","actionScore":34,"primaryVendor":"artifex","primaryProduct":"mupdf","cweId":"CWE-119","fixAvailable":true,"tags":["pre-auth","rce","memory","remote"],"epssDelta7":0.0027,"summary":"Stack-based buffer overflow in the xps_parse_color function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote attackers to execute arbitrary code via a large number of entries in the ContextColor value of the Fill attribute in a Path element.","cvssVector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","cvssVersion":"2.0","cvssSource":"nvd-primary","cweName":"Improper Restriction of Operations within the Bounds of a Memory Buffer","kevAdded":null,"kevDue":null,"kevRansomware":null,"source":"nvd","cna":"mitre","ssvc":null,"sources":{"cna":"2024-08-06T09:58:16.235Z","osv":"2026-11-13T03:18:18.039Z","epss":"2026-11-12","cna_seen":"2026-09-29T10:47:31.197Z","exploitdb":"2026-11-13T03:17:58.683Z"},"cvssCna":null,"hasPatchRef":false,"credits":[],"counts":{"exploitdb":1,"metasploit":0,"nuclei":0,"githubPoc":0},"products":[{"vendor":"artifex","product":"mupdf","cpe":"cpe:2.3:a:artifex:mupdf"}],"references":[{"url":"http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=60dabde18d7fe12b19da8b509bdfee9cc886aafc","tags":null},{"url":"http://lists.opensuse.org/opensuse-updates/2014-02/msg00088.html","tags":null},{"url":"http://seclists.org/fulldisclosure/2014/Jan/130","tags":null},{"url":"http://seclists.org/oss-sec/2014/q1/375","tags":null},{"url":"http://secunia.com/advisories/58904","tags":null},{"url":"http://www.debian.org/security/2014/dsa-2951","tags":null},{"url":"http://www.osvdb.org/102340","tags":null},{"url":"http://www.securityfocus.com/bid/65036","tags":null}],"exploits":[{"source":"exploitdb","kind":"local","date":"2014-01-20"}],"analysis":null,"affectedVersions":[{"vendor":"artifex","product":"mupdf","version":"*","vsi":null,"vse":null,"vei":"1.3","vee":null},{"vendor":"artifex","product":"mupdf","version":"1.0","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"artifex","product":"mupdf","version":"1.1","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"artifex","product":"mupdf","version":"1.2","vsi":null,"vse":null,"vei":null,"vee":null}],"source_attribution":"NVD (NIST), CVE Program, CISA KEV, FIRST EPSS, OSV. Aggregated by Noroxi."}