Description (CNA)
Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the user running the Documalis Free PDF Editor or Documalis Free PDF Scanner software.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Documalis / Free PDF Editor | affected 5.7.2.26 |
| Documalis / Free PDF Scanner | affected 5.7.2.122 |
CWE
CWE-120
References
ADP enrichment
No English description supplied.