NetSight
high7.8Public exploit code

CVE-2012-5340

SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.

Affected products

VendorProductAffected versions
SumatrapdfreaderSumatrapdf
Version 2.1.1
ArtifexMupdf
Versions 1.0, 1.1

Weakness classification

References