Lucene search

K
cveMitreCVE-2012-4895
HistoryOct 05, 2012 - 10:51 a.m.

CVE-2012-4895

2012-10-0510:51:16
CWE-119
mitre
web.nvd.nist.gov
31
cve-2012-4895
sumatrapdf
buffer overflow
remote code execution
pdf
vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.04

Percentile

92.1%

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4896.

Affected configurations

Nvd
Node
sumatrapdfreadersumatrapdfRange2.0.1
OR
sumatrapdfreadersumatrapdfMatch0.1
OR
sumatrapdfreadersumatrapdfMatch0.2
OR
sumatrapdfreadersumatrapdfMatch0.3
OR
sumatrapdfreadersumatrapdfMatch0.4
OR
sumatrapdfreadersumatrapdfMatch0.5
OR
sumatrapdfreadersumatrapdfMatch0.6
OR
sumatrapdfreadersumatrapdfMatch0.7
OR
sumatrapdfreadersumatrapdfMatch0.8
OR
sumatrapdfreadersumatrapdfMatch0.8.1
OR
sumatrapdfreadersumatrapdfMatch0.9
OR
sumatrapdfreadersumatrapdfMatch0.9.1
OR
sumatrapdfreadersumatrapdfMatch0.9.2
OR
sumatrapdfreadersumatrapdfMatch0.9.3
OR
sumatrapdfreadersumatrapdfMatch0.9.4
OR
sumatrapdfreadersumatrapdfMatch1.0
OR
sumatrapdfreadersumatrapdfMatch1.0.1
OR
sumatrapdfreadersumatrapdfMatch1.1
OR
sumatrapdfreadersumatrapdfMatch1.2
OR
sumatrapdfreadersumatrapdfMatch1.3
OR
sumatrapdfreadersumatrapdfMatch1.4
OR
sumatrapdfreadersumatrapdfMatch1.5
OR
sumatrapdfreadersumatrapdfMatch1.5.1
OR
sumatrapdfreadersumatrapdfMatch1.6
OR
sumatrapdfreadersumatrapdfMatch1.7
OR
sumatrapdfreadersumatrapdfMatch1.8
OR
sumatrapdfreadersumatrapdfMatch1.9
OR
sumatrapdfreadersumatrapdfMatch2.0
VendorProductVersionCPE
sumatrapdfreadersumatrapdf*cpe:2.3:a:sumatrapdfreader:sumatrapdf:*:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.1cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.1:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.2cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.2:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.3cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.3:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.4cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.4:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.5cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.5:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.6cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.6:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.7cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.7:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.8cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.8:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.8.1cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.8.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 281

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.04

Percentile

92.1%

Related for CVE-2012-4895