// For flags

CVE-2012-5340

SumatraPDF 2.1.1/MuPDF 1.0 - Integer Overflow

Severity Score

7.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Attend
*SSVC
Descriptions

SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.

SumatraPDF versión 2.1.1 y MuPDF versión 1.0, permite a atacantes remotos causar un desbordamiento de enteros en la función lex_number() por medio de un archivo PDF corrupto.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:Attend
Exploitation
Poc
Automatable
No
Tech. Impact
Total
* Organization's Worst-case Scenario
Timeline
  • 2012-10-08 CVE Reserved
  • 2012-12-09 CVE Published
  • 2012-12-09 First Exploit
  • 2024-09-13 CVE Updated
  • 2024-10-09 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-190: Integer Overflow or Wraparound
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Sumatrapdfreader
Search vendor "Sumatrapdfreader"
 Sumatrapdf
Search vendor "Sumatrapdfreader" for product "Sumatrapdf"
 2.1.1
Search vendor "Sumatrapdfreader" for product "Sumatrapdf" and version "2.1.1"
-
Affected
Artifex
Search vendor "Artifex"
 Mupdf
Search vendor "Artifex" for product "Mupdf"
 1.0
Search vendor "Artifex" for product "Mupdf" and version "1.0"
-
Affected
Artifex
Search vendor "Artifex"
 Mupdf
Search vendor "Artifex" for product "Mupdf"
 1.1
Search vendor "Artifex" for product "Mupdf" and version "1.1"
iphone_os
Affected