| Package | Affected versions | Patched versions |
|---|---|---|
| djvulibre | = 3.5.1= 3.5.10= 3.5.11= 3.5.12= 3.5.13= 3.5.14= 3.5.15= 3.5.16= 3.5.17= 3.5.18= 3.5.19= 3.5.2= 3.5.20= 3.5.21= 3.5.22= 3.5.23= 3.5.24= 3.5.3= 3.5.4= 3.5.5= 3.5.6= 3.5.7= 3.5.8= 3.5.9≤ 3.5.25 |
DjVuLibre before 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted DjVu (aka .djv) file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free