CVE-2012-4895

SumatraPDF < 2.1 - Remote Code Execution via Crafted PDF Document

Title source: llm
STIX 2.1

Description

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4896.

References (3)

Core 3
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/50656

Scores

EPSS 0.0519
EPSS Percentile 91.5%

Details

CWE
CWE-119
Status published
Products (28)
sumatrapdfreader/sumatrapdf 0.1
sumatrapdfreader/sumatrapdf 0.2
sumatrapdfreader/sumatrapdf 0.3
sumatrapdfreader/sumatrapdf 0.4
sumatrapdfreader/sumatrapdf 0.5
sumatrapdfreader/sumatrapdf 0.6
sumatrapdfreader/sumatrapdf 0.7
sumatrapdfreader/sumatrapdf 0.8
sumatrapdfreader/sumatrapdf 0.8.1
sumatrapdfreader/sumatrapdf 0.9
... and 18 more
Published Oct 05, 2012
Tracked Since Feb 18, 2026