Lucene search

K
cveMitreCVE-2012-4896
HistoryOct 05, 2012 - 10:51 a.m.

CVE-2012-4896

2012-10-0510:51:16
CWE-119
mitre
web.nvd.nist.gov
22
cve-2012-4896
sumatrapdf
buffer overflow
pdf
remote code execution

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.04

Percentile

92.1%

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4895.

Affected configurations

Nvd
Node
sumatrapdfreadersumatrapdfRange2.0.1
OR
sumatrapdfreadersumatrapdfMatch0.1
OR
sumatrapdfreadersumatrapdfMatch0.2
OR
sumatrapdfreadersumatrapdfMatch0.3
OR
sumatrapdfreadersumatrapdfMatch0.4
OR
sumatrapdfreadersumatrapdfMatch0.5
OR
sumatrapdfreadersumatrapdfMatch0.6
OR
sumatrapdfreadersumatrapdfMatch0.7
OR
sumatrapdfreadersumatrapdfMatch0.8
OR
sumatrapdfreadersumatrapdfMatch0.8.1
OR
sumatrapdfreadersumatrapdfMatch0.9
OR
sumatrapdfreadersumatrapdfMatch0.9.1
OR
sumatrapdfreadersumatrapdfMatch0.9.2
OR
sumatrapdfreadersumatrapdfMatch0.9.3
OR
sumatrapdfreadersumatrapdfMatch0.9.4
OR
sumatrapdfreadersumatrapdfMatch1.0
OR
sumatrapdfreadersumatrapdfMatch1.0.1
OR
sumatrapdfreadersumatrapdfMatch1.1
OR
sumatrapdfreadersumatrapdfMatch1.2
OR
sumatrapdfreadersumatrapdfMatch1.3
OR
sumatrapdfreadersumatrapdfMatch1.4
OR
sumatrapdfreadersumatrapdfMatch1.5
OR
sumatrapdfreadersumatrapdfMatch1.5.1
OR
sumatrapdfreadersumatrapdfMatch1.6
OR
sumatrapdfreadersumatrapdfMatch1.7
OR
sumatrapdfreadersumatrapdfMatch1.8
OR
sumatrapdfreadersumatrapdfMatch1.9
OR
sumatrapdfreadersumatrapdfMatch2.0
VendorProductVersionCPE
sumatrapdfreadersumatrapdf*cpe:2.3:a:sumatrapdfreader:sumatrapdf:*:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.1cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.1:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.2cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.2:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.3cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.3:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.4cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.4:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.5cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.5:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.6cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.6:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.7cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.7:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.8cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.8:*:*:*:*:*:*:*
sumatrapdfreadersumatrapdf0.8.1cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.8.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 281

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.04

Percentile

92.1%

Related for CVE-2012-4896