CVE-2011-4221
Investintech.com Able2Doc/Able2Doc Pro - DoS/Code Injection
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2011-4221.
AI-analyzed exploit summary This exploit generates a malformed PDF file with a large buffer overflow payload followed by a 'startxref' string, targeting a vulnerability in SlimPDF Reader 1.0. The PoC demonstrates a DoS condition by crashing the application when the file is opened.
Description
Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document.
Exploits (3)
This exploit generates a malformed PDF file with a large buffer overflow payload followed by a 'startxref' string, targeting a vulnerability in SlimPDF Reader 1.0. The PoC demonstrates a DoS condition by crashing the application when the file is opened.
This exploit generates a malformed PDF file with an oversized buffer (12000 'A' characters) followed by a 'startxref' string, designed to trigger a memory corruption vulnerability in Able2Extract and Able2Extract Server v6.0. The PoC creates a file that, when opened, may cause a crash or arbitrary code execution due to improper handling of the PDF structure.
This exploit generates a malformed PDF file with an oversized buffer (13000 'B' characters) followed by a 'startxref' string, triggering a memory corruption vulnerability in Able2Doc and Able2Doc Professional v6.0. The PoC is designed to cause a crash, demonstrating the vulnerability.