PT-2018-13477 · Pdf Xchange · Pdf-Xchange Editor

Jherve

·

Publicado

2018-09-01

·

Atualizado

2024-11-27

·

CVE-2018-16303

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions PDF-XChange Editor versions prior to 7.0.326.2
Description The issue allows remote attackers to cause a denial of service, specifically resource consumption, via a crafted x:xmpmeta structure.
Recommendations For PDF-XChange Editor versions prior to 7.0.326.2, update to version 7.0.326.2 or later to resolve the issue.

Exploit

Correção

XXE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2018-16303

Produtos afetados

Pdf-Xchange Editor