CVE-2012-6535
EPSS 5.4%djvulibre - arbitrary code execution
發布日:2013/12/2修改日:2026/4/28
描述
DjVuLibre before 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted DjVu (aka .djv) file.
受影響套件(2)
- Debian/djvulibrefrom 0, < 3.5.25.3-1
- Debian/djvulibrefrom 0, < 3.5.23-3+squeeze1