{"api_version":"1","generated_at":"2026-07-23T04:26:38+00:00","cve":"CVE-2012-6535","urls":{"html":"https://cve.report/CVE-2012-6535","api":"https://cve.report/api/cve/CVE-2012-6535.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2012-6535","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-6535"},"summary":{"title":"CVE-2012-6535","description":"DjVuLibre before 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted DjVu (aka .djv) file.","state":"PUBLISHED","assigner":"mitre","published_at":"2013-12-02 22:55:03","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-94","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9.3","severity":"","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://technet.microsoft.com/security/msvr/msvr13-004","name":"http://technet.microsoft.com/security/msvr/msvr13-004","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Microsoft Vulnerability Research Advisory MSVR13-004 | Microsoft Docs","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://www.debian.org/security/2014/dsa-2844","name":"http://www.debian.org/security/2014/dsa-2844","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-2844-1 djvulibre","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-2056-1","name":"http://www.ubuntu.com/usn/USN-2056-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"USN-2056-1: DjVuLibre vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-6535","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-6535","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.19","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.21","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.22","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.23","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.24","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"3.5.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6535","vulnerable":"1","versionEndIncluding":"3.5.25","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"djvulibre_project","cpe5":"djvulibre","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2012","cve_id":"6535","cve":"CVE-2012-6535","epss":"0.053550000","percentile":"0.901080000","score_date":"2026-04-29","updated_at":"2026-04-30 00:13:22"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T21:28:40.111Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"DSA-2844","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2014/dsa-2844"},{"name":"USN-2056-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-2056-1"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://technet.microsoft.com/security/msvr/msvr13-004"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2013-03-19T00:00:00.000Z","descriptions":[{"lang":"en","value":"DjVuLibre before 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted DjVu (aka .djv) file."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2014-01-16T18:57:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"DSA-2844","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2014/dsa-2844"},{"name":"USN-2056-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-2056-1"},{"tags":["x_refsource_MISC"],"url":"http://technet.microsoft.com/security/msvr/msvr13-004"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2012-6535","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"DjVuLibre before 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted DjVu (aka .djv) file."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"DSA-2844","refsource":"DEBIAN","url":"http://www.debian.org/security/2014/dsa-2844"},{"name":"USN-2056-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/USN-2056-1"},{"name":"http://technet.microsoft.com/security/msvr/msvr13-004","refsource":"MISC","url":"http://technet.microsoft.com/security/msvr/msvr13-004"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2012-6535","datePublished":"2013-12-02T22:00:00.000Z","dateReserved":"2013-03-08T00:00:00.000Z","dateUpdated":"2024-08-06T21:28:40.111Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-12-02 22:55:03","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-94","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.25","matchCriteriaId":"EFA87C7B-9840-4E15-B7F1-0B05E36FD246"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"74C27FAE-0DE5-4DF8-9670-285028E91775"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5B0B7483-8F78-48D6-AFDC-2B3A8A076EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"30B4C390-721E-4377-92AC-91B64554F89E"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"0AEF4E03-5F26-4EDA-B886-96A1552F70A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D1FB8935-44C7-4DD4-BCCF-9F66C80A329D"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D4B79E01-6647-40A1-8FC6-1993EEF58191"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.7:*:*:*:*:*:*:*","matchCriteriaId":"1CE11923-2CB8-4922-A4A5-0B46C4960EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.8:*:*:*:*:*:*:*","matchCriteriaId":"10069FBB-4A34-4F32-A85C-077F82F51BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.9:*:*:*:*:*:*:*","matchCriteriaId":"D5ECBC4E-FA3E-49E2-93C9-D21A9AD82DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.10:*:*:*:*:*:*:*","matchCriteriaId":"D6431C3D-A705-4917-9CC2-983E7974ABFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.11:*:*:*:*:*:*:*","matchCriteriaId":"FB06FA7D-7638-40A9-BD8E-8D0FE7B35832"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.12:*:*:*:*:*:*:*","matchCriteriaId":"04F17CDD-DFFA-4130-8E71-C8D2255D1980"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.13:*:*:*:*:*:*:*","matchCriteriaId":"CC88B173-0EB2-4A8B-8C8E-D682D7116901"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.14:*:*:*:*:*:*:*","matchCriteriaId":"A16E6D4C-928B-442D-8F91-2ADDA89FE34C"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.15:*:*:*:*:*:*:*","matchCriteriaId":"EC1C5E2C-69F5-400D-A486-EF102013791F"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.16:*:*:*:*:*:*:*","matchCriteriaId":"39D0E4F5-F8F6-4618-B8AC-E8F25DEEB3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.17:*:*:*:*:*:*:*","matchCriteriaId":"816FBFA2-F482-44DA-84C5-D61FDF1F681D"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.18:*:*:*:*:*:*:*","matchCriteriaId":"0684F4FD-45B8-4128-AC74-D28324B3BF10"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.19:*:*:*:*:*:*:*","matchCriteriaId":"2BAA7EA8-C5C1-47A6-8E1A-4166A519BE2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.20:*:*:*:*:*:*:*","matchCriteriaId":"66F93407-E502-4C2F-93B4-591C5A5DA500"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.21:*:*:*:*:*:*:*","matchCriteriaId":"EC55927F-67AE-45AE-8438-C44929D9E666"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.22:*:*:*:*:*:*:*","matchCriteriaId":"1B035269-D67C-4957-8E87-34555E58A14A"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.23:*:*:*:*:*:*:*","matchCriteriaId":"9C6780F4-B81E-4796-AE3C-FC3C99880470"},{"vulnerable":true,"criteria":"cpe:2.3:a:djvulibre_project:djvulibre:3.5.24:*:*:*:*:*:*:*","matchCriteriaId":"267B163B-0457-41FB-B9FC-9D88E21D5623"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2012","CveId":"6535","Ordinal":"1","Title":"CVE-2012-6535","CVE":"CVE-2012-6535","Year":"2012"},"notes":[{"CveYear":"2012","CveId":"6535","Ordinal":"1","NoteData":"DjVuLibre before 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted DjVu (aka .djv) file.","Type":"Description","Title":"CVE-2012-6535"},{"CveYear":"2012","CveId":"6535","Ordinal":"2","NoteData":"2013-12-02","Type":"Other","Title":"Published"},{"CveYear":"2012","CveId":"6535","Ordinal":"3","NoteData":"2014-01-16","Type":"Other","Title":"Modified"}]}}}