critical9.3Public exploit code
CVE-2012-5324
Multiple buffer overflows in the Pdf Printer Preferences ActiveX Control in pdfxctrl.dll in Tracker Software PDF-XChange 3.60.0128 allow remote attackers to ex…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Tracker Software pdfSaver ActiveX 3.60 - 'pdfxctrl.dll' Stack Buffer Overflow (SEH) (PoC)2012-01-29 · dos · windows
Impact
Multiple buffer overflows in the Pdf Printer Preferences ActiveX Control in pdfxctrl.dll in Tracker Software PDF-XChange 3.60.0128 allow remote attackers to execute arbitrary code via a long string in the (1) sub_path parameter to the StoreInRegistry function or (2) sub_key parameter to the InitFromRegistry function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tracker-Software | Pdf-Xchange | Version 3.60.0128 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/18427
- http://www.securityfocus.com/bid/51712
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5067.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72774
- http://www.exploit-db.com/exploits/18427
- http://www.securityfocus.com/bid/51712
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5067.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72774