Lucene search

K
cve[email protected]CVE-2011-4216
HistoryNov 01, 2011 - 7:55 p.m.

CVE-2011-4216

2011-11-0119:55:02
CWE-264
web.nvd.nist.gov
22
cve-2011-4216
investintech
slimpdf reader
write operations
denial of service
application crash
execute arbitrary code
crafted pdf document

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.8%

Investintech.com SlimPDF Reader does not properly restrict write operations, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.

Affected configurations

NVD
Node
investintechslimpdf_reader

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.8%

Related for CVE-2011-4216