SumatraPDF lt 0.9.3 Heap Overflow PoC

Posted by c on Apr 24

The overflow occurs at the following location:

mupdf/mupdf/pdf_function.c:1167

    obj = fz_dictgets(dict, "C0");
    if (fz_isarray(obj))
    {
        func->n =…

URL: http://seclists.org/fulldisclosure/2009/Apr/0257.html