CVE-2018-7264

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

12.54%

Published

Feb 28, 2018

Modified

Nov 21, 2024

Public PoC / Exploit (2)

All weaponized →

Exploit-DBActivePDF Toolkit < 8.1.0.19023 - Multiple Memory Corruptions TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out of bounds write and sign errors, allowing a remote attacker to execute arbitrary code on vulnerable applications using the ActivePDF Toolkit to process untrusted images.

Weaknesses (CWE)

CWE-787

Affected Products (1)

activepdf · activepdf_toolkit (up to 8.1.0.19023)vulnerable

References (4)

http://seclists.org/fulldisclosure/2018/Feb/74

ExploitMailing ListThird Party Advisory

https://www.exploit-db.com/exploits/44251/

ExploitThird Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2018/Feb/74

ExploitMailing ListThird Party Advisory

https://www.exploit-db.com/exploits/44251/

ExploitThird Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs