Description
PDF Explorer 1.5.66.2 contains a structured exception handler (SEH) overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH records with malicious data. Attackers can craft a payload with buffer overflow, NSEH jump, and ROP gadget chains that execute when the Custom fields settings dialog processes the malicious input in the Label field.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rttsoftware | PDF Explorer | 1.5.66.2 | — |
References
- ExploitDB-46016 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: PDF Explorer 1.5.66.2 Structured Exception Handler Local Code Execution third-party-advisory