CVE-2009-4117

MuPDF < 20091125231942 - 'pdf_shade4.c' Multiple Stack Buffer Overflows

Severity Score

9.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Multiple stack-based buffer overflows in pdf_shade4.c in MuPDF before commit 20091125231942, as used in SumatraPDF before 1.0.1, allow remote attackers to cause a denial of service and possibly execute arbitrary code via a /Decode array for certain types of shading that are not properly handled by the (1) pdf_loadtype4shade, (2) pdf_loadtype5shade, (3) pdf_loadtype6shade, and (4) pdf_loadtype7shade functions. NOTE: some of these details are obtained from third party information.

Multiples desbordamientos de búfer basados en pila en pdf_shade4.c de MuPDF en versiones anteriores a commit 20091125231942, y como es utilizado en SumatraPDF en versiones anteriores a la v1.0.1, permiten a atacantes remotos provocar una denegación de servicio y posiblemente ejecutar código de su elección a través de un array /Decode para ciertos tipos de sombreado que no son apropiadamente manejados por las funciones (1) pdf_loadtype4shade, (2) pdf_loadtype5shade, (3) pdf_loadtype6shade, y (4) pdf_loadtype7shade. NOTA: algunos de estos detalles han sido obtenidos de información de terceras partes.

*Credits: N/A

CVSS Scores

NISTv2 9.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2009-11-28 First Exploit
2009-11-30 CVE Reserved
2009-12-01 CVE Published
2024-09-16 CVE Updated
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (10)

URL	Tag	Source
http://blog.kowalczyk.info/software/sumatrapdf/news.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/54441	Vdb Entry
https://bugs.ghostscript.com/show_bug.cgi?id=708030
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=a21cc1548993c392e474817bb3d656eb3730d88f
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=cf6860c3d70a2f7a63cdb621cc3b58c891915deb

URL	Date	SRC
https://www.exploit-db.com/exploits/10244	2009-11-28
http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0330.html	2024-09-16

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/37494	2020-03-11
http://secunia.com/advisories/37513	2020-03-11
http://www.vupen.com/english/advisories/2009/3355	2020-03-11

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Sumatrapdfreader Search vendor "Sumatrapdfreader"		Sumatrapdf Search vendor "Sumatrapdfreader" for product "Sumatrapdf"				<= 1.0 Search vendor "Sumatrapdfreader" for product "Sumatrapdf" and version " <= 1.0"		-		Affected
Sumatrapdfreader Search vendor "Sumatrapdfreader"		Sumatrapdf Search vendor "Sumatrapdfreader" for product "Sumatrapdf"				0.1 Search vendor "Sumatrapdfreader" for product "Sumatrapdf" and version "0.1"		-		Affected
Sumatrapdfreader Search vendor "Sumatrapdfreader"		Sumatrapdf Search vendor "Sumatrapdfreader" for product "Sumatrapdf"				0.2 Search vendor "Sumatrapdfreader" for product "Sumatrapdf" and version "0.2"		-		Affected
Sumatrapdfreader Search vendor "Sumatrapdfreader"		Sumatrapdf Search vendor "Sumatrapdfreader" for product "Sumatrapdf"				0.3 Search vendor "Sumatrapdfreader" for product "Sumatrapdf" and version "0.3"		-		Affected
Sumatrapdfreader Search vendor "Sumatrapdfreader"		Sumatrapdf Search vendor "Sumatrapdfreader" for product "Sumatrapdf"				0.4 Search vendor "Sumatrapdfreader" for product "Sumatrapdf" and version "0.4"		-		Affected
Sumatrapdfreader Search vendor "Sumatrapdfreader"		Sumatrapdf Search vendor "Sumatrapdfreader" for product "Sumatrapdf"				0.5 Search vendor "Sumatrapdfreader" for product "Sumatrapdf" and version "0.5"		-		Affected
Sumatrapdfreader Search vendor "Sumatrapdfreader"		Sumatrapdf Search vendor "Sumatrapdfreader" for product "Sumatrapdf"				0.6 Search vendor "Sumatrapdfreader" for product "Sumatrapdf" and version "0.6"		-		Affected
Sumatrapdfreader Search vendor "Sumatrapdfreader"		Sumatrapdf Search vendor "Sumatrapdfreader" for product "Sumatrapdf"				0.7 Search vendor "Sumatrapdfreader" for product "Sumatrapdf" and version "0.7"		-		Affected
Sumatrapdfreader Search vendor "Sumatrapdfreader"		Sumatrapdf Search vendor "Sumatrapdfreader" for product "Sumatrapdf"				0.8 Search vendor "Sumatrapdfreader" for product "Sumatrapdf" and version "0.8"		-		Affected
Sumatrapdfreader Search vendor "Sumatrapdfreader"		Sumatrapdf Search vendor "Sumatrapdfreader" for product "Sumatrapdf"				0.8.1 Search vendor "Sumatrapdfreader" for product "Sumatrapdf" and version "0.8.1"		-		Affected
Sumatrapdfreader Search vendor "Sumatrapdfreader"		Sumatrapdf Search vendor "Sumatrapdfreader" for product "Sumatrapdf"				0.9 Search vendor "Sumatrapdfreader" for product "Sumatrapdf" and version "0.9"		-		Affected
Sumatrapdfreader Search vendor "Sumatrapdfreader"		Sumatrapdf Search vendor "Sumatrapdfreader" for product "Sumatrapdf"				0.9.1 Search vendor "Sumatrapdfreader" for product "Sumatrapdf" and version "0.9.1"		-		Affected
Sumatrapdfreader Search vendor "Sumatrapdfreader"		Sumatrapdf Search vendor "Sumatrapdfreader" for product "Sumatrapdf"				0.9.2 Search vendor "Sumatrapdfreader" for product "Sumatrapdf" and version "0.9.2"		-		Affected
Sumatrapdfreader Search vendor "Sumatrapdfreader"		Sumatrapdf Search vendor "Sumatrapdfreader" for product "Sumatrapdf"				0.9.3 Search vendor "Sumatrapdfreader" for product "Sumatrapdf" and version "0.9.3"		-		Affected
Sumatrapdfreader Search vendor "Sumatrapdfreader"		Sumatrapdf Search vendor "Sumatrapdfreader" for product "Sumatrapdf"				0.9.4 Search vendor "Sumatrapdfreader" for product "Sumatrapdf" and version "0.9.4"		-		Affected