CVEvulnerability
CVE-2012-4895
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-10-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4896.
Affected configurations
• sumatrapdfreader sumatrapdf (<= 2.0.1)
• sumatrapdfreader sumatrapdf 0.1
• sumatrapdfreader sumatrapdf 0.2
• sumatrapdfreader sumatrapdf 0.3
• sumatrapdfreader sumatrapdf 0.4
• sumatrapdfreader sumatrapdf 0.5
• sumatrapdfreader sumatrapdf 0.6
• sumatrapdfreader sumatrapdf 0.7
• sumatrapdfreader sumatrapdf 0.8
• sumatrapdfreader sumatrapdf 0.8.1
• sumatrapdfreader sumatrapdf 0.9
• sumatrapdfreader sumatrapdf 0.9.1
• sumatrapdfreader sumatrapdf 0.9.2
• sumatrapdfreader sumatrapdf 0.9.3
• sumatrapdfreader sumatrapdf 0.9.4
• sumatrapdfreader sumatrapdf 1.0
• sumatrapdfreader sumatrapdf 1.0.1
• sumatrapdfreader sumatrapdf 1.1
• sumatrapdfreader sumatrapdf 1.2
• sumatrapdfreader sumatrapdf 1.3
• sumatrapdfreader sumatrapdf 1.4
• sumatrapdfreader sumatrapdf 1.5
• sumatrapdfreader sumatrapdf 1.5.1
• sumatrapdfreader sumatrapdf 1.6
• sumatrapdfreader sumatrapdf 1.7
• sumatrapdfreader sumatrapdf 1.8
• sumatrapdfreader sumatrapdf 1.9
• sumatrapdfreader sumatrapdf 2.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://code.google.com/p/sumatrapdf/source/browse/trunk/docs/releasenotes.txt code.google.com
- http://secunia.com/advisories/50656 secunia.com
- http://technet.microsoft.com/security/msvr/msvr12-014 technet.microsoft.com
- http://code.google.com/p/sumatrapdf/source/browse/trunk/docs/releasenotes.txt code.google.com
- http://secunia.com/advisories/50656 secunia.com
- http://technet.microsoft.com/security/msvr/msvr12-014 technet.microsoft.com