CVE-2007-5397 Heap-based buffer overflow in the activePDF Server service (aka APServer.exe) in activePDF Server 3.8.4 and 3.8.5.14, and possibly other versions before 3.8.6.16, allows remote attackers to execute ar...
HighCVSS 7.5
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the activePDF Server service (aka APServer.exe) in activePDF Server 3.8.4 and 3.8.5.14, and possibly other versions before 3.8.6.16, allows remote attackers to execute arbitrary code via a packet with a size field that is less than the actual size of the data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activepdf server | <= 3.8.4 | No fix listed |
| activepdf server | <= 3.8.5.14 | No fix listed |
References
- 27371 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- 28013 vdb-entry