CVE-2012-5340: Integer Overflow
Published Jan 23, 2020
·Updated
SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lexnumber() function via a corrupt PDF file.
Affected Software
3 affected components
Sumatrapdfreader Sumatrapdf=2.1.1
Artifex Mupdf=1.0
Artifex Mupdf Iphone Os=1.1
Event History
Jan 23, 2020
CVE Published
via MITRE·09:33 PM
Data Sourced
via MITRE·09:33 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2012-5340.
2
What is the severity of CVE-2012-5340?
The severity of CVE-2012-5340 is high with a CVSS score of 7.8.
3
Which software versions are affected by this vulnerability?
SumatraPDF 2.1.1 and MuPDF 1.0 are affected by this vulnerability.
4
How can remote attackers exploit this vulnerability?
Remote attackers can exploit this vulnerability by causing an Integer Overflow in the lex_number() function through a corrupt PDF file.
5
Is there a known exploit for CVE-2012-5340?
Yes, there is a known exploit for CVE-2012-5340. You can find more information at: http://www.exploit-db.com/exploits/23246