CVE-2018-7264 The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out of bounds write and sign errors, allowing a remote attacker to execute arbitrary...
CriticalCVSS 9.8
EPSS 12.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out of bounds write and sign errors, allowing a remote attacker to execute arbitrary code on vulnerable applications using the ActivePDF Toolkit to process untrusted images.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activepdf toolkit | < 8.1.0.19023 | 8.1.0.19023 |
References
- 20180227 ActivePDF Toolkit < 8.1.0 multiple RCE exploit mailing-list third-party-advisory
- 44251 exploit third-party-advisory vdb-entry