Skip to content

CVE-2012-4895

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary...

9.3 High

CVE-2012-4895 is a high vulnerability (CVSS 9.3) in Sumatrapdfreader Sumatrapdf, published October 5, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.19%, the 92nd percentile. No source names a fixed version.

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4896.

Exploit likelihood

5.19%Down 1.1 points since Feb 4, 2022

What each source reports

NVD Score used 9.3

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4896.

Record: CVE-2012-4895
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4896.

Record: CVE-2012-4895
Updated: 2026-11-02

EUVDEUVD-2012-4820 No score

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4896.

Record: EUVD-2012-4820
Updated: 2026-11-03

GitHub AdvisoriesGHSA-678j-gm52-3vq4 No score

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary...

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4896.

Record: GHSA-678j-gm52-3vq4
Weakness: CWE-119
Updated: 2026-11-02

Affected products

sumatrapdfreader sumatrapdf

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References