SlimPDF Reader Multiple Remote Code Execution Vulnerabilities

Bugtraq ID:	49923
Class:	Unknown
CVE:	CVE-2011-4216 CVE-2011-4217 CVE-2011-4218 CVE-2011-4219 CVE-2011-4220 CVE-2011-4221 CVE-2011-4222 CVE-2011-4223
Remote:	Yes
Local:	No
Published:	Oct 03 2011 12:00AM
Updated:	Jun 26 2012 11:40AM
Credit:	Carlos Mario Penagos Hollmann
Vulnerable:	InvestInTech SlimPDF Reader 0 InvestInTech Absolute PDF Server 0 InvestInTech Able2Extract Server 0 InvestInTech Able2Extract 0 InvestInTech Able2Doc Professional 0 InvestInTech Able2Doc 0
Not Vulnerable:

SlimPDF Reader Multiple Remote Code Execution Vulnerabilities

SlimPDF Reader is prone to multiple remote code-execution vulnerabilities.

Attackers may exploit these issues to execute arbitrary code in the context of the user running the vulnerable application. Failed attempts may result in a denial-of-service condition.

SlimPDF Reader Multiple Remote Code Execution Vulnerabilities

The following exploits are available:

• /data/vulnerabilities/exploits/49923.py
• /data/vulnerabilities/exploits/49923-2.py
• /data/vulnerabilities/exploits/49923-3.py

SlimPDF Reader Multiple Remote Code Execution Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SlimPDF Reader Multiple Remote Code Execution Vulnerabilities

References:

• Investintech ProductsPage (Investintech)
  
• Investintech.com SlimPDF Reader contains multiple vulnerabilities (US-CERT)
  
• SlimPDF Reader Homepage (Investintech)