Description
Investintech.com SlimPDF Reader does not prevent faulting-instruction data from affecting write operations, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.
References
- slimpdf-write-code-execution(71098) vdb-entry
- VU#275036 third-party-advisory