CVE-2013-2830
HIGH EPSS 88.2%
Published Feb 8, 20188y ago · Modified Jun 16, 20262w ago
7.8 CVSS 3.1
Published Feb 8, 2018 8y ago
Last Modified Jun 16, 2026 2w ago
Description
Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted PDF file.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Attack Vector Local
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
88.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-416 Use After Free Memory Safety
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| sumatrapdfreader | sumatrapdf | * | ≥2.0 – <2.2.1 |
References 1
- docs.microsoft.com https://docs.microsoft.com/en-us/security-updates/vulnerabilityresearchadvisories/2013/msvr13-005
Remediation
- docs.microsoft.com https://docs.microsoft.com/en-us/security-updates/vulnerabilityresearchadvisories/2013/msvr13-005