Vulnerability in Investintech Slimpdf Reader

CVE-2011-4217

Investintech.com SlimPDF Reader does not properly restrict read operations during block data moves, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.

EPSS: 0.031 (86.4th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, third-party-advisory)

Frequently asked questions

What is CVE-2011-4217?
CVE-2011-4217 is a vulnerability in Investintech Slimpdf Reader, classified under CWE-264. Published 2011-11-01.
Is CVE-2011-4217 known to be exploited?
2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.