CVE-2012-4895

Summary: CVE-2012-4895 and CVE-2012-4896 describe heap-based buffer overflows in SumatraPDF before 2.1 that allow remote code execution via a crafted PDF document. The two CVEs are stated as different vulnerabilities. The provided details confirm the affected product (SumatraPDF), the vulnerable ...

CVE-2009-1605

CVE-2009-1605 describes a heap-based buffer overflow in MuPDF’s loadexponentialfunc (mupdf/pdf_function.c) in the mupdf-20090223-win32 package, exploitable via crafted PDFs and affecting SumatraPDF 0.9.3 and earlier. The underlying issue could allow remote code execution. Public references from N...

CVE-2012-4896

CVE-2012-4896: SumatraPDF before 2.1 is affected by a heap-based buffer overflow in its PDF handling, allowing remote attackers to execute arbitrary code via a crafted PDF document. The vulnerability is specific to the SumatraPDF parser and is described as a separate issue from CVE-2012-4895. The...

CVE-2009-4117

Concretely affected: MuPDF before commit 20091125231942, specifically within pdf_shade4.c, with SumatraPDF prior to 1.0.1. The issue involves multiple stack-based buffer overflows triggered by a /Decode array for certain shading types that are not correctly handled by pdf_loadtype4shade, pdf_load...

CVE-2013-2830

SumatraPDF Reader (2.x) before 2.2.1 contains a use-after-free vulnerability in memory management (object decrement) that can be triggered by a crafted PDF file, enabling remote code execution. The issue affects SumatraPDF Reader 2.0–2.1.x and is fixed in 2.2.1. Access requires user interaction t...