SumatraPDF's Integer Underflow in PalmDbReader Leads to Crash
Résumé
SumatraPDF's Integer Underflow in PalmDbReader Leads to Crash
Description d'origine
La description telle que publiée par la source (souvent en anglais).
SumatraPDF is a multi-format reader for Windows. All versions contain an off-by-one error in the validation code that only triggers with exactly 2 records, causing an integer underflow in the size calculation. This bug exists in PalmDbReader::GetRecord when opening a crafted Mobi file, resulting in an out-of-bounds heap read that crashes the app. There are no published fixes at the time of publication.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com