← voltar
CVE-2020-7374mediumCWE-120

Documalis Free PDF Editor / Free PDF Scanner Stack Based Buffer Overflow

28Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendcvss 5.3epss 3.1%
da publicação à arma0 dias
Publicada no NVD12 de ago.
metasploit22 de mai.
probabilidade de exploração
3.1%top 13% das CVEs
exploração observada
nãonenhuma fonte reporta
Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the user running the Documalis Free PDF Editor or Documalis Free PDF Scanner software.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L