CVE-2009-4117
Published Dec 1, 2009
Last updated 2 months ago
Overview
- Description
- Multiple stack-based buffer overflows in pdf_shade4.c in MuPDF before commit 20091125231942, as used in SumatraPDF before 1.0.1, allow remote attackers to cause a denial of service and possibly execute arbitrary code via a /Decode array for certain types of shading that are not properly handled by the (1) pdf_loadtype4shade, (2) pdf_loadtype5shade, (3) pdf_loadtype6shade, and (4) pdf_loadtype7shade functions. NOTE: some of these details are obtained from third party information.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-119
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sumatrapdfreader:sumatrapdf:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C9B4E19-8BAA-4EC8-9E37-56CEE745DEF0",
"versionEndIncluding": "1.0"
},
{
"criteria": "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BE8A6DE-5EB6-47C5-BBCA-5ED94783414D"
},
{
"criteria": "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E763B24-5035-476D-8244-D876707FE4B0"
},
{
"criteria": "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "678C49B5-A9F0-4A5C-8CDC-E85E5E509959"
},
{
"criteria": "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "084084EE-CD7D-4D26-9F92-D6C1363C1127"
},
{
"criteria": "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "968776E8-58DE-4D07-B81F-69D751E78569"
},
{
"criteria": "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22988B78-E426-4885-8B1A-55CD875325BD"
},
{
"criteria": "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8AB75661-4385-4C96-ADA6-5E57DF401CBB"
},
{
"criteria": "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BE3A563-DC97-4B03-939F-E183C612BBD5"
},
{
"criteria": "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA284413-F016-4604-BFBA-8C26BED5AD75"
},
{
"criteria": "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4EB1D911-1EA5-4231-8B2C-97B4346B865A"
},
{
"criteria": "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1640649C-D190-4FB5-BDC5-9A5B89945A18"
},
{
"criteria": "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "568130AC-C49F-4C09-9336-C8E3F454C675"
},
{
"criteria": "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76E67580-96C8-4164-88F8-DDA65F901290"
},
{
"criteria": "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBC040EB-4221-4B42-B7F1-426E454BE523"
}
],
"operator": "OR"
}
]
}
]