Vulnerability in Investintech Slimpdf Reader

CVE-2011-4219

Investintech.com SlimPDF Reader does not prevent faulting-address data from affecting branch selection, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.

EPSS: 0.031 (86.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2011-4219?
CVE-2011-4219 is a vulnerability in Investintech Slimpdf Reader, classified under CWE-399. Published 2011-11-01.
Is CVE-2011-4219 known to be exploited?
2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.