CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
Percentile
94.0%
DjVuLibre before 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid,
and other products, allows remote attackers to execute arbitrary code or
cause a denial of service (memory corruption) via a crafted DjVu (aka .djv)
file.