CVE-2012-5006

Heap-based buffer overflow in npdjvu.dll in Caminova DjVu Browser Plug-in 6.1.4 Build 27351 and other versions before 6.1.4.27993 allows remote attackers to execute arbitrary code via a crafted Sjbz chunk in a djvu file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
VendorProductVersion
caminovadjvu_browser_plug-in
𝑥
≤ 6.1.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/46091
http://www.caminova.com/en/downloads/download.aspx?id=1
http://www.osvdb.org/78526
http://www.securityfocus.com/bid/51675
http://secunia.com/advisories/46091
http://www.caminova.com/en/downloads/download.aspx?id=1
http://www.osvdb.org/78526
http://www.securityfocus.com/bid/51675