CVE-2012-6535 DjVuLibre before 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a....
HighCVSS 9.3
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
DjVuLibre before 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted DjVu (aka .djv) file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/djvulibre(Debian:12) | < 3.5.25.3-1 | 3.5.25.3-1 |
| debian/djvulibre(Debian:13) | < 3.5.25.3-1 | 3.5.25.3-1 |
| debian/djvulibre(Debian:14) | < 3.5.25.3-1 | 3.5.25.3-1 |
| djvulibre project djvulibre | <= 3.5.25 | No fix listed |
| djvulibre project djvulibre | = 3.5.1 | No fix listed |
| djvulibre project djvulibre | = 3.5.2 | No fix listed |
| djvulibre project djvulibre | = 3.5.3 | No fix listed |
| djvulibre project djvulibre | = 3.5.4 | No fix listed |
| djvulibre project djvulibre | = 3.5.5 | No fix listed |
| djvulibre project djvulibre | = 3.5.6 | No fix listed |
| djvulibre project djvulibre | = 3.5.7 | No fix listed |
| djvulibre project djvulibre | = 3.5.8 | No fix listed |
| djvulibre project djvulibre | = 3.5.9 | No fix listed |
| djvulibre project djvulibre | = 3.5.10 | No fix listed |
| djvulibre project djvulibre | = 3.5.11 | No fix listed |
| djvulibre project djvulibre | = 3.5.12 | No fix listed |
| djvulibre project djvulibre | = 3.5.13 | No fix listed |
| djvulibre project djvulibre | = 3.5.14 | No fix listed |
| djvulibre project djvulibre | = 3.5.15 | No fix listed |
| djvulibre project djvulibre | = 3.5.16 | No fix listed |
| djvulibre project djvulibre | = 3.5.17 | No fix listed |
| djvulibre project djvulibre | = 3.5.18 | No fix listed |
| djvulibre project djvulibre | = 3.5.19 | No fix listed |
| djvulibre project djvulibre | = 3.5.20 | No fix listed |
| djvulibre project djvulibre | = 3.5.21 | No fix listed |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| djvulibre project djvulibre | = 3.5.22 | No fix listed |
| djvulibre project djvulibre | = 3.5.23 | No fix listed |
| djvulibre project djvulibre | = 3.5.24 | No fix listed |
References
- Debian Security Tracker CVE-2012-6535 vendor-advisory
- technet.microsoft.com vendor-advisory
- DSA-2844 vendor-advisory
- USN-2056-1 vendor-advisory