Vulnerability CVE-2011-4220

Vulnerability CVE-2011-4220

Published: 2011-11-01 Modified: 2012-02-13

Description:

Investintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function calls, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.

See advisories in our WLB2 database:

	Topic	Author	Date
High	Slim PDF Reader 1.0 Memory Corruption	Carlos Mario Pen...	26.06.2012

Type:

CWE-264

(Permissions, Privileges, and Access Controls)

CVSS2 => (AV:N/AC:M/Au:N/C:C/I:C/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
9.3/10	10/10	8.6/10

Exploit range	Attack complexity	Authentication
Remote	Medium	No required
Confidentiality impact	Integrity impact	Availability impact
Complete	Complete	Complete

Affected software
Investintech -> Slimpdf reader

References:

http://www.kb.cert.org/vuls/id/275036

Copyright 2024, cxsecurity.com