Lucene search

K
cveMitreCVE-2009-1605
HistoryMay 11, 2009 - 8:00 p.m.

CVE-2009-1605

2009-05-1120:00:00
CWE-119
mitre
web.nvd.nist.gov
20
cve-2009-1605
information security
buffer overflow
remote code execution
mupdf
pdf vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

AI Score

8.2

Confidence

High

EPSS

0.063

Percentile

93.8%

Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.3 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
sumatrapdfreadersumatrapdfRange0.9.3
OR
sumatrapdfreadersumatrapdfMatch0.1
OR
sumatrapdfreadersumatrapdfMatch0.2
OR
sumatrapdfreadersumatrapdfMatch0.3
OR
sumatrapdfreadersumatrapdfMatch0.4
OR
sumatrapdfreadersumatrapdfMatch0.5
OR
sumatrapdfreadersumatrapdfMatch0.6
OR
sumatrapdfreadersumatrapdfMatch0.7
OR
sumatrapdfreadersumatrapdfMatch0.8
OR
sumatrapdfreadersumatrapdfMatch0.8.1
OR
sumatrapdfreadersumatrapdfMatch0.9
OR
sumatrapdfreadersumatrapdfMatch0.9.1
OR
sumatrapdfreadersumatrapdfMatch0.9.2
VendorProductVersionCPE
sumatrapdfreadersumatrapdf*cpe:2.3:a:sumatrapdfreader:sumatrapdf:*:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.1cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.1:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.2cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.2:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.3cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.3:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.4cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.4:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.5cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.5:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.6cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.6:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.7cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.7:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.8cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.8:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.8.1cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.8.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 131

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

AI Score

8.2

Confidence

High

EPSS

0.063

Percentile

93.8%

Related for CVE-2009-1605