CVE-2020-7374

Katalog CVE

CVSS 7.8 · High EPSS 3,1%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada documalis free pdf editor, documalis free pdf scanner. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the user running the Documalis Free PDF Editor or Documalis Free PDF Scanner software.

Rincian

Terbit di NVD

12 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

3,1% peluang dieksploitasi; lebih tinggi dari 87,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/rapid7/metasploit-framework/pull/13517 exploit · issue tracking · patch · advisory pihak ketiga