CVE-2012-5340 SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.
HighCVSS 7.8
EPSS 5.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/mupdf(Debian:12) | < 1.2-2 | 1.2-2 |
| debian/mupdf(Debian:13) | < 1.2-2 | 1.2-2 |
| debian/mupdf(Debian:14) | < 1.2-2 | 1.2-2 |
| sumatrapdfreader sumatrapdf | = 2.1.1 | No fix listed |
| artifex mupdf | = 1.0 | No fix listed |
| artifex mupdf | = 1.1 | No fix listed |
References
- Debian Security Tracker CVE-2012-5340 vendor-advisory
- 23246 exploit third-party-advisory vdb-entry
- bugs.ghostscript.com
- cgit.ghostscript.com