CVE-2012-5340

CVE-2012-5340 affects SumatraPDF 2.1.1 and MuPDF 1.0, where a vulnerability in the lex_number() function can cause a Integer Overflow when processing a crafted PDF. The issue is confirmed across multiple sources (NVD/OSV Debian/Ubuntu/CVE records) and is triggered by corrupt PDF files. Exploitati...

CVE-2012-5340

SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lexnumber function via a corrupt PDF file...

CVE-2012-5340

SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lexnumber function via a corrupt PDF file...

CVE-2012-5340

SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lexnumber function via a corrupt PDF file...

CVE-2012-5340: Integer Overflow or Wraparound

SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lexnumber function via a corrupt PDF file...

SumatraPDF Reader Memory Misreference Vulnerability

SumatraPDF Reader is a free software to view PDF files. A memory misreference vulnerability exists in version 2.x of SumatraPDF Reader prior to 2.2.1. A remote attacker can exploit this vulnerability to execute arbitrary code with the help of specially crafted PDF files...

Design/Logic Flaw

Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted PDF file...

CVE-2013-2830

Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted PDF file...

CVE-2013-2830

SumatraPDF Reader (2.x) before 2.2.1 contains a use-after-free vulnerability in memory management (object decrement) that can be triggered by a crafted PDF file, enabling remote code execution. The issue affects SumatraPDF Reader 2.0–2.1.x and is fixed in 2.2.1. Access requires user interaction t...

CVE-2013-2830

Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted PDF file...

CVE-2013-2830: Use After Free

Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted PDF file...

SumatraPDF 3.1.2 DLL Hijacking

Hi @ll, the executable installer deg and the "portable" version of SumatraPDF 3.1.2 available from are vulnerable to DLL hijacking ': The executable installers SumatraPDF-3.1.2-install.exe and SumatraPDF-3.1.2-64-install.exe load and execute tested on a fully patched Windows 7 SP1 at least...

SumatraPDF DLL Hijack

Hi @ll, the executable installers ° of all versions of SumatraPDF see are vulnerable: 1. On Windows Embedded POSReady 2009 alias Windows XP SP3 the installer of the current version 3.1.1 loads and executes a rogue/bogus/malicious DCIMan32.dll ' eventually found in the directory it is started from...

DjVuLibre <= 3.5.25.3 - Out of Bounds Access Violation

No description provided by source. from shutil import copyfile import sys """ Exploit Title: DjVuLibre = 3.5.25 Out of Bounds Access Violation Date: 07/14/24 Exploit Author: drone @dronesec Vendor: http://djvu.sourceforge.net/ Software link:...

DjVuLibre 3.5.25.3 - Out of Bounds Access Violation

DjVuLibre 3.5.25.3 - Out of Bounds Access Violation from shutil import copyfile import sys """ Exploit Title: DjVuLibre .text:004D3BC5 mov eax, eax+ecx4 .text:004D3BC8 test eax, eax .text:004D3BCA jnz short loc We overwrite 4 bytes in an FG44 chunk header with \xff\xff\xff\xff: 46 47 34 34 00 00 ...

DjVuLibre 3.5.25.3 Out Of Bounds Access Violation

from shutil import copyfile import sys """ Exploit Title: DjVuLibre .text:004D3BC5 mov eax, eax+ecx4 .text:004D3BC8 test eax, eax .text:004D3BCA jnz short loc We overwrite 4 bytes in an FG44 chunk header with \xff\xff\xff\xff: 46 47 34 34 00 00 04 6E 00 64 01 02 FF FF FF FF 80 FF...

SumatraPDF 2.0.1 - (.chm) & (.mobi) Memory Corruption

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= ============================================================================= SumatraPDF v2.0.1 chm and mobi files memory corruption Autho...

SumatraPDF 1.1 - Denial of Service PoC

No description provided by source. Exploit Title: SumatraPDF v1.1 Denial-of-Service Date: June, 14, 2010 Author: Matthew Bergin Software Link: blog.kowalczyk.info/software/sumatrapdf Version: 1.1 Tested on: Windows XP Home SP3 Code was generated utilizing a custom fuzzer, PoC creates an Access...

PT-2012-6299

Name of the Vulnerable Software and Affected Versions SumatraPDF Reader versions 2.x before 2.2.1 SumatraPDF Reader version 2.2.0 and earlier Description A use-after-free issue exists in the way SumatraPDF Reader handles objects in memory, allowing remote attackers to execute arbitrary code via a...

SumatraPDF 2.1.1/MuPDF 1.0 - Integer Overflow

Sumatra 2.1.1/MuPDF 1.0 Integer Overflow ======================================= There is an integer overflow on the MuPDF in the lexnumber function which can be triggered using a corrupt PDF file with ObjStm. I'm attaching a file that reproduces the problem with the original unmodified file. The...