CVE-2012-5324 Multiple buffer overflows in the Pdf Printer Preferences ActiveX Control in pdfxctrl.dll in Tracker Software PDF-XChange 3.60.0128 allow remote attackers to execute arbitrary code via a long string in...
HighCVSS 9.3
EPSS 6.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple buffer overflows in the Pdf Printer Preferences ActiveX Control in pdfxctrl.dll in Tracker Software PDF-XChange 3.60.0128 allow remote attackers to execute arbitrary code via a long string in the (1) sub_path parameter to the StoreInRegistry function or (2) sub_key parameter to the InitFromRegistry function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tracker-software pdf-xchange | = 3.60.0128 | No fix listed |
References
- 18427 exploit
- 51712 exploit vdb-entry
- www.zeroscience.mk exploit
- pdfxchange-activex-buffer-overflow(72774) vdb-entry