CVE-2019-25467

Verypdf docPrint Pro 8.0 Local SEH Buffer Overflow

CVSS 8.6 HIGHEPSS 0.1%CWE-787

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.6EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

11 mar 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized alphanumeric encoded payload in the User Password or Master Password fields. Attackers can craft a malicious payload with encoded shellcode and SEH chain manipulation to bypass protections and execute a MessageBox proof-of-concept when the password fields are processed during PDF encryption.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Produtos afetados

Verypdf · docPrint Pro

Referências

http://dl.verypdf.net/docprint_pro_setup.exe https://www.exploit-db.com/exploits/47394 https://www.vulncheck.com/advisories/verypdf-docprint-pro-local-seh-buffer-overflow http://www.verypdf.com