CVE-2020-7374

Description

Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the user running the Documalis Free PDF Editor or Documalis Free PDF Scanner software.

References

https://github.com/rapid7/metasploit-framework/pull/13517

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS