CVE-2021-26605CWE-20

unidocs ezPDFReader arbitrary command execution vulnerability

High · published August 5, 2021

CVSS v3.1
7.5
EPSS
1%
Percentile
63.9
In the wild
Unconfirmed
What it is

An improper input validation vulnerability in the service of ezPDFReader allows attacker to execute arbitrary command. This issue occurred when the ezPDF launcher received and executed crafted input values through JSON-RPC communication.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01049 · 63.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-08-05T20:22Z
EPSS history
Timeline
  • 05 AUG 20:22Z
    unidocs ezPDFReader arbitrary command execution vulnerability
    cvelistv5