cpe:/a:krzysztof_kowalczyk:sumatrapdf:0.1 cpe:/a:krzysztof_kowalczyk:sumatrapdf:0.2 cpe:/a:krzysztof_kowalczyk:sumatrapdf:0.3 cpe:/a:krzysztof_kowalczyk:sumatrapdf:0.4 cpe:/a:krzysztof_kowalczyk:sumatrapdf:0.5 cpe:/a:krzysztof_kowalczyk:sumatrapdf:0.6 cpe:/a:krzysztof_kowalczyk:sumatrapdf:0.7 cpe:/a:krzysztof_kowalczyk:sumatrapdf:0.8 cpe:/a:krzysztof_kowalczyk:sumatrapdf:0.8.1 cpe:/a:krzysztof_kowalczyk:sumatrapdf:0.9 cpe:/a:krzysztof_kowalczyk:sumatrapdf:0.9.1 cpe:/a:krzysztof_kowalczyk:sumatrapdf:0.9.2 cpe:/a:krzysztof_kowalczyk:sumatrapdf:0.9.3 cpe:/a:krzysztof_kowalczyk:sumatrapdf:0.9.4 cpe:/a:krzysztof_kowalczyk:sumatrapdf:1.0 CVE-2009-4117 2009-11-30T19:30:00.217-05:00 2017-08-16T21:31:27.070-04:00 9.3 NETWORK MEDIUM NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2009-12-01T12:08:00.000-05:00 FULLDISC 20091128 MuPDF pdf_shade4.c multiple stack-based buffer overflows SECUNIA 37494 SECUNIA 37513 VUPEN ADV-2009-3355 CONFIRM http://blog.kowalczyk.info/software/sumatrapdf/news.html XF mupdf-pdfshade4c-bo(54441) Multiple stack-based buffer overflows in pdf_shade4.c in MuPDF before commit 20091125231942, as used in SumatraPDF before 1.0.1, allow remote attackers to cause a denial of service and possibly execute arbitrary code via a /Decode array for certain types of shading that are not properly handled by the (1) pdf_loadtype4shade, (2) pdf_loadtype5shade, (3) pdf_loadtype6shade, and (4) pdf_loadtype7shade functions. NOTE: some of these details are obtained from third party information.