Vulnerability Details : CVE-2012-4914
Public exploit exists!
Stack-based buffer overflow in the reader in CoolPDF 3.0.2.256 allows remote attackers to execute arbitrary code via a PDF document with a crafted stream.
Vulnerability category: OverflowExecute code
Products affected by CVE-2012-4914
- cpe:2.3:a:coolpdf:coolpdf:3.0.2.256:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-4914
94.23%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 99 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2012-4914
-
Cool PDF Image Stream Buffer Overflow
Disclosure Date: 2013-01-18First seen: 2020-04-26exploit/windows/fileformat/coolpdf_image_stream_bofThis module exploits a stack buffer overflow in Cool PDF Reader prior to version 3.0.2.256. The vulnerability is triggered when opening a malformed PDF file that contains a specially crafted image stream. This module has been tested successfully on Cool PDF 3.0.2.2
CVSS scores for CVE-2012-4914
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
NIST |
CWE ids for CVE-2012-4914
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-4914
Jump to