Integer Overflow Vulnerability in SumatraPDF and MuPDF by Artifex Software
CVE-2012-5340
7.8HIGH
Key Information:
- Vendor
SumatraPDFreader
- Status
- Vendor
- CVE Published:
- 23 January 2020
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2012-5340?
The vulnerability present in SumatraPDF and MuPDF allows remote attackers to exploit an integer overflow flaw in the lex_number() function. This can be triggered through specially crafted PDF files, leading to potential remote code execution. Users should be aware of the risks associated with processing untrusted PDF documents to mitigate exposure to this vulnerability.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.