vendor:
PDFView ActiveX Control
by:
SecurityFocus
9.3
CVSS
HIGH
Heap Buffer-Overflow
119
CWE
Product Name: PDFView ActiveX Control
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
VeryPDF PDFView ActiveX Control Heap Buffer-Overflow Vulnerability
The VeryPDF PDFView ActiveX control is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.
Mitigation:
Ensure that user-supplied data is properly bounds-checked before copying it into an insufficiently sized memory buffer.
