CVE-2020-7374CWE-120

Documalis Free PDF Editor / Free PDF Scanner Stack Based Buffer Overflow

Medium · published August 12, 2020

CVSS v3.1
5.3
EPSS
3%
Percentile
87.6
In the wild
Unconfirmed
What it is

Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the user running the Documalis Free PDF Editor or Documalis Free PDF Scanner software.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.03094 · 87.6th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2020-08-12T17:25Z
EPSS history
Timeline
  • 12 AUG 17:25Z
    Documalis Free PDF Editor / Free PDF Scanner Stack Based Buffer Overflow
    cvelistv5