Vulnerability Description
PDF Explorer 1.5.66.2 contains a structured exception handler (SEH) overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH records with malicious data. Attackers can craft a payload with buffer overflow, NSEH jump, and ROP gadget chains that execute when the Custom fields settings dialog processes the malicious input in the Label field.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rttsoftware | Pdf Explorer | 1.5.66.2 |
Related Weaknesses (CWE)
References
- http://www.rttsoftware.com/Product
- https://www.exploit-db.com/exploits/46016ExploitVDB Entry
- https://www.rttsoftware.com/files/PDFExplorerTrialSetup.zipProduct
- https://www.vulncheck.com/advisories/pdf-explorer-structured-exception-handler-lThird Party Advisory
FAQ
What is CVE-2018-25217?
CVE-2018-25217 is a vulnerability with a CVSS score of 8.4 (HIGH). PDF Explorer 1.5.66.2 contains a structured exception handler (SEH) overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH records with malicious data. Attacke...
How severe is CVE-2018-25217?
CVE-2018-25217 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-25217?
Check the references section above for vendor advisories and patch information. Affected products include: Rttsoftware Pdf Explorer.