CVE-2013-4986 Stack-based buffer overflow in PDFAX0722_IconCool.dll 7.22.1125.2121 in IconCool PDFCool Studio 3.32 Build 130330 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file.
MediumCVSS 6.8
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in PDFAX0722_IconCool.dll 7.22.1125.2121 in IconCool PDFCool Studio 3.32 Build 130330 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iconcool pdfcool studio | <= 3.32 | No fix listed |
| iconcool pdfcool studio | = 2.0-build110427 | No fix listed |
| iconcool pdfcool studio | = 2.0-build110502 | No fix listed |
| iconcool pdfcool studio | = 2.0-build110508 | No fix listed |
| iconcool pdfcool studio | = 2.0-build110510 | No fix listed |
| iconcool pdfcool studio | = 2.0-build110512 | No fix listed |
| iconcool pdfcool studio | = 2.5-build120405 | No fix listed |
| iconcool pdfcool studio | = 2.6-build120405 | No fix listed |
| iconcool pdfcool studio | = 2.7-build120405 | No fix listed |
| iconcool pdfcool studio | = 2.8-build120518 | No fix listed |
| iconcool pdfcool studio | = 2.10-build110519 | No fix listed |
| iconcool pdfcool studio | = 2.10-build110523 | No fix listed |
| iconcool pdfcool studio | = 2.12-build110528 | No fix listed |
| iconcool pdfcool studio | = 2.14-build110608 | No fix listed |
| iconcool pdfcool studio | = 2.16-build110612 | No fix listed |
| iconcool pdfcool studio | = 2.20-build110707 | No fix listed |
| iconcool pdfcool studio | = 2.24-build1110801 | No fix listed |
| iconcool pdfcool studio | = 2.26-build110823 | No fix listed |
| iconcool pdfcool studio | = 2.30-build110920 | No fix listed |
| iconcool pdfcool studio | = 2.40-build111016 | No fix listed |
| iconcool pdfcool studio | = 3.0-build121022 | No fix listed |
References
- 20131001 CORE-2013-0828 - PDFCool Studio Buffer Overflow Vulnerability exploit mailing-list
- 97959 vdb-entry
- packetstormsecurity.com exploit
- 55058 third-party-advisory vendor-advisory
- www.coresecurity.com exploit