CVEvulnerability

CVE-2012-6535

9.3 HIGH Published 2013-12-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-12-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-94

Description

DjVuLibre before 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted DjVu (aka .djv) file.

Affected configurations

• djvulibre project djvulibre (<= 3.5.25) • djvulibre project djvulibre 3.5.1 • djvulibre project djvulibre 3.5.2 • djvulibre project djvulibre 3.5.3 • djvulibre project djvulibre 3.5.4 • djvulibre project djvulibre 3.5.5 • djvulibre project djvulibre 3.5.6 • djvulibre project djvulibre 3.5.7 • djvulibre project djvulibre 3.5.8 • djvulibre project djvulibre 3.5.9 • djvulibre project djvulibre 3.5.10 • djvulibre project djvulibre 3.5.11 • djvulibre project djvulibre 3.5.12 • djvulibre project djvulibre 3.5.13 • djvulibre project djvulibre 3.5.14 • djvulibre project djvulibre 3.5.15 • djvulibre project djvulibre 3.5.16 • djvulibre project djvulibre 3.5.17 • djvulibre project djvulibre 3.5.18 • djvulibre project djvulibre 3.5.19 • djvulibre project djvulibre 3.5.20 • djvulibre project djvulibre 3.5.21 • djvulibre project djvulibre 3.5.22 • djvulibre project djvulibre 3.5.23 • djvulibre project djvulibre 3.5.24

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References