Sumatra PDF and MuPDF 'lex_number()' Function Remote Integer Overflow Vulnerability
BID:56875
Info
Sumatra PDF and MuPDF 'lex_number()' Function Remote Integer Overflow Vulnerability
| Bugtraq ID: | 56875 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2012-5340 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 09 2012 12:00AM |
| Updated: | Dec 09 2012 12:00AM |
| Credit: | beford |
| Vulnerable: |
Sumatra PDF Sumatra PDF 2.1.1 MuPDF MuPDF for iOS 1.1 MuPDF MuPDF 1.0 |
| Not Vulnerable: |
MuPDF MuPDF 1.1 |
Discussion
Sumatra PDF and MuPDF 'lex_number()' Function Remote Integer Overflow Vulnerability
Sumatra PDF and MuPDF are prone to an integer-overflow vulnerability because they fail to properly validate user-supplied input.
An attacker can exploit this issue to execute arbitrary malicious code in the context of the affected application. Failed exploit attempts will likely crash the application.
The following versions are vulnerable:
MuPDF 1.0
MuPDF for iOS 1.1
Sumatra 2.1.1
Sumatra PDF and MuPDF are prone to an integer-overflow vulnerability because they fail to properly validate user-supplied input.
An attacker can exploit this issue to execute arbitrary malicious code in the context of the affected application. Failed exploit attempts will likely crash the application.
The following versions are vulnerable:
MuPDF 1.0
MuPDF for iOS 1.1
Sumatra 2.1.1
Exploit / POC
Sumatra PDF and MuPDF 'lex_number()' Function Remote Integer Overflow Vulnerability
The following exploit code is available:
The following exploit code is available: