vendor:
SlimPDF Reader
by:
Carlos Mario Penagos Hollmann
9,3
CVSS
HIGH
Buffer Overflow
120
CWE
Product Name: SlimPDF Reader
Affected Version From: 1.0
Affected Version To: 1.0
Patch Exists: YES
Related CWE: CVE-2011-4220
CPE: a:investintech:slimpdf_reader
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows 7
2012
Exploit Title
A buffer overflow vulnerability exists in Investintech's SlimPDF Reader 1.0 when a specially crafted PDF file is opened. The vulnerability is caused due to a boundary error when handling the 'startxref' keyword within the PDF file. This can be exploited to cause a stack-based buffer overflow by e.g. an overly long string of 'A' characters. Successful exploitation may allow execution of arbitrary code.
Mitigation:
Upgrade to the latest version of SlimPDF Reader
