CVE-2013-2830

SumatraPDF Reader (2.x) before 2.2.1 contains a use-after-free vulnerability in memory management (object decrement) that can be triggered by a crafted PDF file, enabling remote code execution. The issue affects SumatraPDF Reader 2.0–2.1.x and is fixed in 2.2.1. Access requires user interaction t...

CVE-2013-2830

Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted PDF file...

SumatraPDF 3.1.2 DLL Hijacking

Hi @ll, the executable installer deg and the "portable" version of SumatraPDF 3.1.2 available from are vulnerable to DLL hijacking ': The executable installers SumatraPDF-3.1.2-install.exe and SumatraPDF-3.1.2-64-install.exe load and execute tested on a fully patched Windows 7 SP1 at least...

SumatraPDF DLL Hijack

Hi @ll, the executable installers ° of all versions of SumatraPDF see are vulnerable: 1. On Windows Embedded POSReady 2009 alias Windows XP SP3 the installer of the current version 3.1.1 loads and executes a rogue/bogus/malicious DCIMan32.dll ' eventually found in the directory it is started from...

DjVuLibre <= 3.5.25.3 - Out of Bounds Access Violation

No description provided by source. from shutil import copyfile import sys """ Exploit Title: DjVuLibre = 3.5.25 Out of Bounds Access Violation Date: 07/14/24 Exploit Author: drone @dronesec Vendor: http://djvu.sourceforge.net/ Software link:...

DjVuLibre 3.5.25.3 - Out of Bounds Access Violation

DjVuLibre 3.5.25.3 - Out of Bounds Access Violation from shutil import copyfile import sys """ Exploit Title: DjVuLibre .text:004D3BC5 mov eax, eax+ecx4 .text:004D3BC8 test eax, eax .text:004D3BCA jnz short loc We overwrite 4 bytes in an FG44 chunk header with \xff\xff\xff\xff: 46 47 34 34 00 00 ...

DjVuLibre 3.5.25.3 Out Of Bounds Access Violation

from shutil import copyfile import sys """ Exploit Title: DjVuLibre .text:004D3BC5 mov eax, eax+ecx4 .text:004D3BC8 test eax, eax .text:004D3BCA jnz short loc We overwrite 4 bytes in an FG44 chunk header with \xff\xff\xff\xff: 46 47 34 34 00 00 04 6E 00 64 01 02 FF FF FF FF 80 FF...

SumatraPDF 2.0.1 - (.chm) & (.mobi) Memory Corruption

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= ============================================================================= SumatraPDF v2.0.1 chm and mobi files memory corruption Autho...

SumatraPDF 1.1 - Denial of Service PoC

No description provided by source. Exploit Title: SumatraPDF v1.1 Denial-of-Service Date: June, 14, 2010 Author: Matthew Bergin Software Link: blog.kowalczyk.info/software/sumatrapdf Version: 1.1 Tested on: Windows XP Home SP3 Code was generated utilizing a custom fuzzer, PoC creates an Access...

SumatraPDF 2.1.1/MuPDF 1.0 - Integer Overflow

Sumatra 2.1.1/MuPDF 1.0 Integer Overflow ======================================= There is an integer overflow on the MuPDF in the lexnumber function which can be triggered using a corrupt PDF file with ObjStm. I'm attaching a file that reproduces the problem with the original unmodified file. The...

CVE-2012-4896

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4895...

CVE-2012-4895

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4896...

Heap overflow

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4896...

Heap overflow

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4895...

CVE-2012-4895

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4896...

CVE-2012-4896

CVE-2012-4896: SumatraPDF before 2.1 is affected by a heap-based buffer overflow in its PDF handling, allowing remote attackers to execute arbitrary code via a crafted PDF document. The vulnerability is specific to the SumatraPDF parser and is described as a separate issue from CVE-2012-4895. The...

CVE-2012-4896

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4895...

CVE-2012-4895

Summary: CVE-2012-4895 and CVE-2012-4896 describe heap-based buffer overflows in SumatraPDF before 2.1 that allow remote code execution via a crafted PDF document. The two CVEs are stated as different vulnerabilities. The provided details confirm the affected product (SumatraPDF), the vulnerable ...

SumatraPDF < 2.1 Multiple Vulnerabilities

The version of SumatraPDF installed on the remote Windows host is earlier than 2.1. As such, it is potentially affected by multiple memory corruption vulnerabilities. By tricking a user into opening a specially crafted PDF file, a remote, unauthenticated attacker could execute arbitrary code on t...

SumatraPDF Detection

SumatraPDF, a free PDF file viewer, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62389; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"SumatraPDF Detection";...