Description
Encrypt PDF 2.3 contains a buffer overflow vulnerability that allows local attackers to crash the application by inputting excessively long strings into password fields. Attackers can paste a 1000-byte buffer into the User Password or Master Password field in the Settings dialog to trigger an application crash when importing PDF files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Verypdf | Encrypt PDF | 2.3 | — |
References
- ExploitDB-46871 exploit
- Official Product Homepage product
- VulnCheck Advisory: Encrypt PDF 2.3 Denial of Service via Buffer Overflow third-party-advisory