CVE-2018-25217

Katalog CVE

CVSS 7.8 · High EPSS 0,22%

Kerentanan Out-of-bounds Write pada rttsoftware pdf explorer. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

PDF Explorer 1.5.66.2 contains a structured exception handler (SEH) overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH records with malicious data. Attackers can craft a payload with buffer overflow, NSEH jump, and ROP gadget chains that execute when the Custom fields settings dialog processes the malicious input in the Label field.

Rincian

Terbit di NVD

26 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/pdf-explorer-structured-exception-handler-local-code-execution advisory pihak ketiga
• https://www.exploit-db.com/exploits/46016 exploit · vdb entry
• http://www.rttsoftware.com/ product
• https://www.rttsoftware.com/files/PDFExplorerTrialSetup.zip product